Adding dynamic template fetch to filebeat-oss

2020-06-23 17:03:33 +02:00 · 2020-06-23 17:03:33 +02:00 · 600dd40896
commit 600dd40896
parent eb276a1f73
2 changed files with 4 additions and 1804 deletions
--- a/roles/wazuh/ansible-filebeat-oss/tasks/config.yml
+++ b/roles/wazuh/ansible-filebeat-oss/tasks/config.yml
@ -9,9 +9,9 @@
      mode: 0400
    notify: restart filebeat

-  - name: Copy Elasticsearch template.
-    template:
-      src: elasticsearch.yml.j2
+  - name: Fetch latest Wazuh alerts template
+    get_url:
+      url: https://raw.githubusercontent.com/wazuh/wazuh/master/extensions/elasticsearch/7.x/wazuh-template.json
      dest: "/etc/filebeat/wazuh-template.json"
      owner: root
      group: root
--- a/roles/wazuh/ansible-filebeat-oss/templates/elasticsearch.yml.j2
+++ b/roles/wazuh/ansible-filebeat-oss/templates/elasticsearch.yml.j2