From c37124a2124cc8c7a67cff154a6aa0b25d2cc5ac Mon Sep 17 00:00:00 2001
From: Kazuhiro MUSASHI <simoom634@yahoo.co.jp>
Date: Mon, 14 Sep 2020 00:44:03 +0900
Subject: [PATCH] Modify the base configuration for `promtail`.

---
 .../promtail/templates/etc/promtail/base.yaml | 39 ++++++++++++++++++-
 1 file changed, 38 insertions(+), 1 deletion(-)

diff --git a/cookbooks/promtail/templates/etc/promtail/base.yaml b/cookbooks/promtail/templates/etc/promtail/base.yaml
index 3c7307d..d7f9b96 100644
--- a/cookbooks/promtail/templates/etc/promtail/base.yaml
+++ b/cookbooks/promtail/templates/etc/promtail/base.yaml
@@ -56,7 +56,7 @@ scrape_configs:
       labels:
         job: sshd
         hostname: <%= @HOSTNAME %>
-        level: warning
+        level: info
         __path__: /var/log/auth.log
 
     pipeline_stages:
@@ -184,3 +184,40 @@ scrape_configs:
 
         - output:
             source: message
+
+  - job_name: login
+    journal:
+      json: false
+      max_age: 12h
+      path: /var/log/journal
+      labels:
+        job: login
+        level: notice
+        hostname: <%= @HOSTNAME %>
+
+    relabel_configs:
+      - action: keep
+        regex: 'systemd-logind.service'
+        source_labels:
+        - __journal__systemd_unit
+
+  - job_name: systemd
+    journal:
+      json: false
+      max_age: 12h
+      path: /var/log/journal
+      labels:
+        job: systemd
+        level: info
+        hostname: <%= @HOSTNAME %>
+
+    relabel_configs:
+      - action: keep
+        regex: '.*\.service'
+        source_labels:
+        - __journal__systemd_unit
+
+      - action: drop
+        regex: '.*(cron|supervisor|ssh|promtail|local|grafana|motd|dnsmasq|snapd|logind).*'
+        source_labels:
+        - __journal__systemd_unit