afmarulanda/wazuh-ansible-4.8.1
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Log4j fix added

Browse Source
This commit is contained in:
Gonzalo Acuña 2021-12-15 09:25:02 -03:00
parent c6be0b2dcd
commit 9c5a4651bb
No known key found for this signature in database
GPG Key ID: 646BA79A313A2270
4 changed files with 30 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

11
roles/elastic-stack/ansible-elasticsearch/tasks/main.yml
View File

@ -63,6 +63,17 @@
notify: restart elasticsearch notify: restart elasticsearch
tags: configure tags: configure
- name: Configure disabled log4j.
template:
src: "templates/disabledlog4j.options.j2"
dest: /etc/elasticsearch/jvm.options.d/disabledlog4j.options
owner: root
group: elasticsearch
mode: 0644
force: yes
notify: restart elasticsearch
tags: install
# fix in new PR (ignore_errors) # fix in new PR (ignore_errors)
- import_tasks: "RMRedHat.yml" - import_tasks: "RMRedHat.yml"

4
roles/elastic-stack/ansible-elasticsearch/templates/disabledlog4j.options.j2 Normal file
View File

@ -0,0 +1,4 @@
## JVM configuration
## Disable log4j
-Dlog4j2.formatMsgNoLookups=true

11
roles/opendistro/opendistro-elasticsearch/tasks/main.yml
View File

@ -55,6 +55,17 @@
notify: restart elasticsearch notify: restart elasticsearch
tags: install tags: install
- name: Configure disabled log4j.
template:
src: "templates/disabledlog4j.options.j2"
dest: /etc/elasticsearch/jvm.options.d/disabledlog4j.options
owner: root
group: elasticsearch
mode: 0644
force: yes
notify: restart elasticsearch
tags: install
- name: Ensure extra time for Elasticsearch to start on reboots - name: Ensure extra time for Elasticsearch to start on reboots
lineinfile: lineinfile:
path: /usr/lib/systemd/system/elasticsearch.service path: /usr/lib/systemd/system/elasticsearch.service

4
roles/opendistro/opendistro-elasticsearch/templates/disabledlog4j.options.j2 Normal file
View File

@ -0,0 +1,4 @@
## JVM configuration
## Disable log4j
-Dlog4j2.formatMsgNoLookups=true