From 28b9f0736e43d188abc8a5b63eee1e428cca2935 Mon Sep 17 00:00:00 2001
From: Jan Tuomi <jan@jantuomi.fi>
Date: Wed, 15 Oct 2025 09:21:37 +0300
Subject: Add pylogsentinel

---
 templates/usr_local_etc_pylogsentinel.conf.j2 | 13 +++++++++++++
 1 file changed, 13 insertions(+)
 create mode 100644 templates/usr_local_etc_pylogsentinel.conf.j2

(limited to 'templates/usr_local_etc_pylogsentinel.conf.j2')

diff --git a/templates/usr_local_etc_pylogsentinel.conf.j2 b/templates/usr_local_etc_pylogsentinel.conf.j2
new file mode 100644
index 0000000..8eb154a
--- /dev/null
+++ b/templates/usr_local_etc_pylogsentinel.conf.j2
@@ -0,0 +1,13 @@
+[system]
+state_dir = /var/run/pylogsentinel
+max_block_size = 10M
+
+[logs]
+cmd = find / -type d -path '*/var/log'
+
+[action.default]
+cmd = echo -e "---------\nMatched $RULE_ID in $FILE at line $LINE, context:\n\n$CONTEXT\n" >> /tmp/pylogsentinel.daily
+
+[rule.error]
+description = Error-like conditions
+pattern = /(error|fatal|exception|kill|crash)/i
-- 
cgit v1.3