Adding dynamic template fetch to filebeat-oss

2020-06-23 17:03:33 +02:00 · 2020-06-23 17:03:33 +02:00 · 600dd40896
commit 600dd40896
parent eb276a1f73
2 changed files with 4 additions and 1804 deletions
--- a/roles/wazuh/ansible-filebeat-oss/tasks/config.yml
+++ b/roles/wazuh/ansible-filebeat-oss/tasks/config.yml
@ -9,9 +9,9 @@
      mode: 0400
    notify: restart filebeat
-  - name: Copy Elasticsearch template.
+  - name: Fetch latest Wazuh alerts template
-    template:
+    get_url:
-      src: elasticsearch.yml.j2
+      url: https://raw.githubusercontent.com/wazuh/wazuh/master/extensions/elasticsearch/7.x/wazuh-template.json
      dest: "/etc/filebeat/wazuh-template.json"
      owner: root
      group: root
@ -19,4 +19,4 @@
    notify: restart filebeat
  tags:
-  - configure
+  - configure
--- a/roles/wazuh/ansible-filebeat-oss/templates/elasticsearch.yml.j2
+++ b/roles/wazuh/ansible-filebeat-oss/templates/elasticsearch.yml.j2