diff --git a/ansible-wazuh-manager/defaults/main.yml b/ansible-wazuh-manager/defaults/main.yml index 5a0d7b67..c5d2e9dc 100644 --- a/ansible-wazuh-manager/defaults/main.yml +++ b/ansible-wazuh-manager/defaults/main.yml @@ -2,6 +2,9 @@ wazuh_manager_fqdn: "wazuh-server" wazuh_manager_config: + json_output: 'yes' + alerts_log: 'yes' + logall: 'no' enable_authd: false email_notification: no mail_to: diff --git a/ansible-wazuh-manager/tasks/main.yml b/ansible-wazuh-manager/tasks/main.yml index 5e000f40..bff50411 100644 --- a/ansible-wazuh-manager/tasks/main.yml +++ b/ansible-wazuh-manager/tasks/main.yml @@ -89,6 +89,15 @@ - name: Retrieving Wazuh-api User Credentials include_vars: wazuh_api_creds.yml +- name: Checking alert log output settings + fail: msg="Please enable json_output or alerts_log options." + when: + - wazuh_manager_config.json_output == 'no' + - wazuh_manager_config.alerts_log == 'no' + tags: + - init + - config + - name: Configure ossec.conf template: src=var-ossec-etc-ossec-server.conf.j2 dest=/var/ossec/etc/ossec.conf diff --git a/ansible-wazuh-manager/templates/var-ossec-etc-ossec-server.conf.j2 b/ansible-wazuh-manager/templates/var-ossec-etc-ossec-server.conf.j2 index 1ffa2d81..4c19e0ab 100644 --- a/ansible-wazuh-manager/templates/var-ossec-etc-ossec-server.conf.j2 +++ b/ansible-wazuh-manager/templates/var-ossec-etc-ossec-server.conf.j2 @@ -6,8 +6,9 @@ - yes - yes + {{ wazuh_manager_config.json_output }} + {{ wazuh_manager_config.alerts_log }} + {{ wazuh_manager_config.logall }} {% if wazuh_manager_config.email_notification | lower == "yes" %} yes {% else %}