syslog.pp

#
# Notes:
# * the newsyslog service is responsible for ensuring the file permissions
#   for the /var/log/messages log file

class base::syslog {
  base::syslog::config::syslog { '/etc/syslog.conf': 
    ensure => present,
  }

  # RHEL4/5 are ancient and use syslog, everything modern uses rsyslog
  if ( $::operatingsystem == 'RedHat' and $::lsbmajdistrelease < 6 ) {
    service { 'syslog': ensure => running }
  } 
  else {
    file { '/etc/rsyslog.d':
      ensure => directory,
      mode   => '0755';
    }
    service { 'syslog':
      ensure    => running,
      name      => 'rsyslog',
      hasstatus => true,
    }
    base::syslog::config::rsyslog { '/etc/rsyslog.conf': ensure => present }
  }

  # Create a symlink from /var/log/syslog to /var/log/messages for the
  # poor infrastructure folks used to the old path.
  file { '/var/log/syslog':
    ensure => link,
    target => '/var/log/messages',
  }

  # Install filter-syslog rules to ignore the restart messages from the
  # syslog daemon.
  file { '/etc/filter-syslog/syslog':
    source => 'puppet:///modules/base/syslog/etc/filter-syslog/syslog',
  }
}