From be3fc881422a282dedfce0dad7890a55b8e420ae Mon Sep 17 00:00:00 2001
From: olli <olli@ds9.dedyn.io>
Date: Thu, 28 Sep 2023 14:52:19 +0200
Subject: [PATCH] basics.yml aktualisiert

---
 basics.yml | 16 ++++++++++++++--
 1 file changed, 14 insertions(+), 2 deletions(-)

diff --git a/basics.yml b/basics.yml
index c7fe113..b35fecc 100644
--- a/basics.yml
+++ b/basics.yml
@@ -577,10 +577,22 @@
           if $programname == 'kernel' then /var/log/kernel.log
           if $programname == 'kernel' then stop
           # docker
-          if $programname == 'docker' then /var/log/docker.log
-          if $programname == 'docker' then stop
+          if $programname contains 'docker' then /var/log/docker.log
+          if $programname contains 'docker' then stop
           if $programname == 'containerd' then /var/log/docker.log
           if $programname == 'containerd' then stop
+          # sudo
+          if $programname == 'sudo' then /var/log/sudo.log
+          if $programname == 'sudo' then stop
+          # dnscrypt-proxy
+          if $programname == 'dnscrypt-proxy' then /var/log/dnscrypt-proxy.log
+          if $programname == 'dnscrypt-proxy' then stop
+          # ansible
+          if $programname contains 'ansible' then /var/log/ansible.log
+          if $programname contains 'ansible' then stop
+          # passwd
+          if $programname contains 'passwd' then /var/log/passwd.log
+          if $programname contains 'passwd' then stop      
           # Rest in messages
           *.* /var/log/messages
         backup: yes