From 6fb5192ed962a72fc4f18480358a6fde1d2a7b2b Mon Sep 17 00:00:00 2001
From: "JESUS D. GARCIA" <jesusd.garcia@wazuh.com>
Date: Fri, 13 Sep 2024 09:27:26 -0500
Subject: [PATCH] Add support for journald logs

---
 .../templates/var-ossec-etc-ossec-agent.conf.j2             | 6 +++++-
 1 file changed, 5 insertions(+), 1 deletion(-)

diff --git a/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2 b/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2
index b1a282493..99fd93f93 100644
--- a/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2
+++ b/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2
@@ -284,7 +284,7 @@
     {% endif %}
 
     <!-- Files/directories to ignore -->
-    {% if wazuh_agent_config.syscheck.ignore is defined and (ansible_system == "Linux" or ansible_system == "Darwin") %}    
+    {% if wazuh_agent_config.syscheck.ignore is defined and (ansible_system == "Linux" or ansible_system == "Darwin") %}
     {% for ignore in wazuh_agent_config.syscheck.ignore %}
     <ignore>{{ ignore }}</ignore>
     {% endfor %}
@@ -378,6 +378,10 @@
     {% endif %}
   </localfile>
   {% endfor %}
+  <localfile>
+    <log_format>journald</log_format>
+    <location>journald</location>
+  </localfile>
   {% endif %}
 
   {% if ansible_system == "Darwin" %}