diff --git a/roles/wazuh/ansible-wazuh-manager/defaults/main.yml b/roles/wazuh/ansible-wazuh-manager/defaults/main.yml index 356a32aa..94cb4672 100644 --- a/roles/wazuh/ansible-wazuh-manager/defaults/main.yml +++ b/roles/wazuh/ansible-wazuh-manager/defaults/main.yml @@ -183,6 +183,8 @@ wazuh_manager_config: executable: 'route-null.cmd' expect: 'srcip' timeout_allowed: 'yes' + rule_exclude: + '0215-policy_rules.xml' active_responses: - command: 'restart-ossec' location: 'local' diff --git a/roles/wazuh/ansible-wazuh-manager/tasks/main.yml b/roles/wazuh/ansible-wazuh-manager/tasks/main.yml index 11480e91..279d19a7 100644 --- a/roles/wazuh/ansible-wazuh-manager/tasks/main.yml +++ b/roles/wazuh/ansible-wazuh-manager/tasks/main.yml @@ -109,11 +109,13 @@ - rules - name: Configure the shared-agent.conf - template: src=var-ossec-etc-shared-agent.conf.j2 - dest=/var/ossec/etc/shared/default/agent.conf - owner=ossec - group=ossec - mode=0640 + template: + src: var-ossec-etc-shared-agent.conf.j2 + dest: /var/ossec/etc/shared/default/agent.conf + owner: ossec + group: ossec + mode: 0640 + validate: '/var/ossec/bin/verify-agent-conf -f %s' notify: restart wazuh-manager tags: - init