Merge pull request #6 from wazuh/logstash-with-fileinput

Add logstash user to ossec group

ansible-role-logstash/tasks/Debian.yml

@@ -38,3 +38,18 @@
 - name: Debian/Ubuntu | Install Logstash
   apt: name=logstash=1:{{ elastic_stack_version }}-1 state=present update_cache=yes
   tags: install
+
+- name: Debian/Ubuntu | Checking if wazuh-manager is installed
+  command: dpkg -l wazuh-manager
+  register: wazuh_manager_check_deb
+  args:
+    warn: no
+
+- name: Debian/Ubuntu | Add user logstash to group ossec
+  user:
+    name: logstash
+    groups: ossec
+    append: yes
+  when:
+    - logstash_input_beats == false
+    - wazuh_manager_check_deb.rc == 0

ansible-role-logstash/tasks/RedHat.yml

@@ -24,3 +24,18 @@
   package: name=logstash-{{ elastic_stack_version }} state=present
   when: oracle_java_task_rpm_installed is defined
   tags: install
+
+- name: RedHat/CentOS/Fedora | Checking if wazuh-manager is installed
+  command: rpm -q wazuh-manager
+  register: wazuh_manager_check_rpm
+  args:
+    warn: no
+
+- name: RedHat/CentOS/Fedora | Add user logstash to group ossec
+  user:
+    name: logstash
+    groups: ossec
+    append: yes
+  when:
+    - logstash_input_beats == false
+    - wazuh_manager_check_rpm.rc == 0