Moving mongod to syslog logging.

config/50-mozdef-filter.conf

@@ -16,4 +16,6 @@ if $programname == 'sso-worker' then /var/log/mozdef/sso.log
 if $programname == 'cloudtrail-worker' then /var/log/mozdef/cloudtrail.log
 if $programname == 'alertplugins-worker' then /var/log/mozdef/alertplugins.log
 if $programname == 'contegix-auditd-worker' then /var/log/mozdef/contegix-auditd.log
+if $programname == 'mongod.3002' then /var/log/mozdef/mongo/meteor-mongo.log
+if $programname == 'mongod' then /var/log/mozdef/mongo/mongo.log
 & stop

config/mongod.conf

@@ -4,10 +4,10 @@
 #   http://docs.mongodb.org/manual/reference/configuration-options/
 
 # where to write logging data.
-systemLog:
-  destination: file
-  logAppend: true
-  path: /var/log/mozdef/mongo/meteor-mongo.log
+#systemLog:
+#  destination: file
+#  logAppend: true
+#  path: /var/log/mozdef/mongo/meteor-mongo.log
 
 # Where and how to store data.
 storage:

systemdfiles/web/mongod.service

@@ -8,7 +8,7 @@ PermissionsStartOnly=true
 ExecStartPre=-/usr/bin/mkdir /var/run/mozdefdb
 ExecStartPre=/usr/bin/chown -R mozdef:mozdef /var/run/mozdefdb/
 PIDFile=/var/run/mozdefdb/mozdefdb.pid
-ExecStart=/usr/bin/mongod  --storageEngine=mmapv1 --config /etc/mongod.conf
+ExecStart=/usr/bin/mongod  --storageEngine=mmapv1 --config /etc/mongod.conf --syslog
 ExecReload=/bin/kill -HUP $MAINPID
 Restart=always
 User=mozdef