To configure Helix Enterprise with ForgeRock’s OpenAM solution, you must configure your rSyslog as follows:
$ModLoad imfile $InputFilePollInterval 10 $PrivDropToGroup adm $WorkDirectory /var/spool/rsyslog $InputFileName /home/ec2-user/openam12/openam/debug/Authentication $InputFileTag debugAuth: $InputFileStateFile stat-debugAuth12-access #this must be unique for each file being polled $InputFileSeverity info $InputFilePersistStateInterval 20000 $InputRunFileMonitor $InputFileName /home/ec2-user/openam12/openam/log/amSSO.access $InputFileTag amSSO: $InputFileStateFile stat-amSSO12-access #this must be unique for each file being polled $InputFileSeverity info $InputFilePersistStateInterval 20000 $InputRunFileMonitor $InputFileName /opt/demo/tomcat7b/bin/access.log $InputFileTag tomcat7baccess: $InputFileStateFile stat-tomcat7baccess12-access #this must be unique for each file being polled $InputFileSeverity info $InputFilePersistStateInterval 20000 $InputRunFileMonitor # Add a tag for file events $template TAPFormatFile,"<%pri%>%protocol-version% %app-name% %procid% %msgid% %msg%\n" # Send to Helix then discard if $programname == 'debugAuth' then @@127.0.0.1:516;TAPFormatFile if $programname == 'amSSO' then @@127.0.0.1:516;TAPFormatFile if $programname == 'tomcat7baccess' then @@127.0.0.1:516;TAPFormatFile