afmarulanda/wazuh-ansible-4.8.1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Multiple IPs option

Browse Source
This commit is contained in:
cadoming 2018-11-20 10:49:37 +00:00
parent adc876b090
commit 53322bbec8
3 changed files with 7 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
playbooks/wazuh-logstash.yml
View File

@ -1,3 +1,3 @@
- hosts: <your logstash host>
- hosts: logstash
roles:
- { role: /etc/ansible/roles/wazuh-ansible/roles/elastic-stack/ansible-logstash, elasticsearch_network_host: 'localhost' }
- { role: /etc/ansible/roles/wazuh-ansible/roles/elastic-stack/ansible-logstash, elasticsearch_network_host: ["localhost"] }

5
roles/elastic-stack/ansible-logstash/defaults/main.yml
View File

@ -2,7 +2,10 @@
logstash_create_config: true
logstash_input_beats: false
elasticsearch_network_host: "127.0.0.1"
#You can introduce Multiples IPs
# elasticseacrh_network_host: ["Localhost1", "Localhost2", "Localhost3", ...]
elasticsearch_network_host: ["Localhost"]
elasticsearch_http_port: "9200"
elasticsearch_shards: 5
elasticsearch_replicas: 1

2
roles/elastic-stack/ansible-logstash/templates/01-wazuh.conf.j2
View File

@ -66,7 +66,7 @@ filter {
output {
#stdout { codec => rubydebug }
elasticsearch {
hosts => ["{{ elasticsearch_network_host }}:{{ elasticsearch_http_port }}"]
hosts => {{ elasticsearch_network_host | to_json}}
index => "wazuh-alerts-3.x-%{+YYYY.MM.dd}"
document_type => "wazuh"
}