agent configuration and monitoring

roles/wazuh/ansible-wazuh-agent/defaults/main.yml

@@ -90,6 +90,8 @@ wazuh_agent_config:
       location: '/var/log/messages'
     - format: 'syslog'
       location: '/var/log/secure'
+    - format: 'syslog'
+      location: 'var/log/auth.log'
     - format: 'command'
       command: 'df -P'
       frequency: '360'

roles/wazuh/ansible-wazuh-manager/defaults/main.yml

@@ -221,11 +221,10 @@ wazuh_agent_configs:
       - /etc/svc/volatile
       no_diff:
         - /etc/ssl/private.key
-      directories:
-        - dirs: /etc,/usr/bin,/usr/sbin
-          checks: 'check_all="yes"'
-        - dirs: /bin,/sbin
-          checks: 'check_all="yes"'
+      # Example
+      #directories:
+        #- dirs: /etc,/usr/bin,/usr/sbin
+        #  checks: 'check_all="yes"'
     rootcheck:
       frequency: 43200
       cis_distribution_filename: null