23 lines
562 B
YAML
23 lines
562 B
YAML
---
|
|
- block:
|
|
- name: Copy Filebeat configuration.
|
|
template:
|
|
src: filebeat.yml.j2
|
|
dest: "/etc/filebeat/filebeat.yml"
|
|
owner: root
|
|
group: root
|
|
mode: 0400
|
|
notify: restart filebeat
|
|
|
|
- name: Fetch latest Wazuh alerts template
|
|
get_url:
|
|
url: https://raw.githubusercontent.com/wazuh/wazuh/{{ wazuh_template_branch }}/extensions/elasticsearch/7.x/wazuh-template.json
|
|
dest: "/etc/filebeat/wazuh-template.json"
|
|
owner: root
|
|
group: root
|
|
mode: 0400
|
|
notify: restart filebeat
|
|
|
|
tags:
|
|
- configure
|