add splunk forwarding to neo4j

playbooks/edx-east/neo4j.yml

@@ -13,3 +13,5 @@
         - coursegraph
 #    - aws
     - neo4j
+    - role: splunkforwarder
+      when: COMMON_ENABLE_SPLUNKFORWARDER

playbooks/roles/neo4j/defaults/main.yml

@@ -27,6 +27,7 @@ neo4j_https_port: 7473  # default in package is 7473
 neo4j_http_port: 7474  # default in package is 7474
 neo4j_listen_address: "0.0.0.0"
 neo4j_heap_max_size: "3000"
+neo4j_log_dir: "/var/log/neo4j"
 
 # Properties file settings
 neo4j_https_settings_key: "dbms.connector.https.address"

playbooks/roles/neo4j/tasks/main.yml

@@ -72,6 +72,26 @@
     - install
     - install:configuration
 
+- name: set log dir for neo4j
+  lineinfile:
+    create: yes
+    dest: "{{ neo4j_server_config_file }}"
+    regexp: "dbms.directories.logs="
+    line: "dbms.directories.logs={{ neo4j_log_dir }}"
+  tags:
+    - install
+    - install:configuration
+
+- name: Create neo4j logging dir
+  file:
+    path: "{{ neo4j_log_dir }}"
+    state: directory
+    owner: neo4j
+    mode: "0755"
+  tags:
+    - install
+    - install:base
+
 - name: restart neo4j
   service:
     name: neo4j

playbooks/roles/splunkforwarder/defaults/main.yml

@@ -76,6 +76,10 @@ SPLUNKFORWARDER_LOG_ITEMS:
     recursive: true
     index: '{{ COMMON_ENVIRONMENT }}-{{ COMMON_DEPLOYMENT }}'
     sourcetype: 'rabbitmq'
+  - source: '/var/log/neo4j'
+    recursive: true
+    index: '{{ COMMON_ENVIRONMENT }}-{{ COMMON_DEPLOYMENT }}'
+    sourcetype: 'neo4j'
 
 #
 # OS packages