active_response_disable configuration

2018-10-31 11:50:37 +00:00 · 2018-10-31 11:50:37 +00:00 · 33e9150dcd
commit 33e9150dcd
parent 1bd21e381b
2 changed files with 2 additions and 1 deletions
--- a/roles/wazuh/ansible-wazuh-agent/defaults/main.yml
+++ b/roles/wazuh/ansible-wazuh-agent/defaults/main.yml
@ -24,6 +24,7 @@ wazuh_winagent_config:
  repo: https://packages.wazuh.com/3.x/windows/
  md5: 935d1993029021f3951b9511e2171207
 wazuh_agent_config:
+  active_response_disabled: 'no'
  log_format: 'plain'
  syscheck:
    frequency: 43200
--- a/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2
+++ b/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2
@ -36,7 +36,7 @@
  </logging>

  <active-response>
-    <disabled>no</disabled>
+    <disabled>{{ wazuh_agent_config.active_response_disabled|default('no') }}</disabled>
  </active-response>

  {% if wazuh_agent_config.rootcheck is defined %}