Commit Graph

598 Commits

Author SHA1 Message Date
zenidd
ed8bccb3a4 roles/filebeat-oss: use apt/yum module instead of package 2020-11-10 18:30:13 +01:00
zenidd
52a809158a roles/filebeat-oss: allow installing fixed filebeat version 2020-11-10 17:03:12 +01:00
zenidd
0afaba51fc Fix repository removal task condition 2020-11-10 13:05:05 +01:00
neonmei
0f6ea26123
roles/wazuh_manager: merge uninstall tasks in a single file 2020-11-09 14:04:55 -03:00
neonmei
d44532482a
roles/wazuh_manager: remove nodejs as wazuh-api was migrated to python
For more information, see: https://github.com/wazuh/wazuh/releases/tag/v4.0.0
2020-11-09 13:58:23 -03:00
neonmei
a1f4a16fd9
roles/wazuh_manager: add support for role-distributed ansible.cfg setting for hash_behaviour 2020-11-09 13:03:54 -03:00
neonmei
3b5d8651a6
roles/wazuh_manager: reduce depth of wazuh_manager_config by extracting contents into external dictionaries 2020-11-09 11:42:01 -03:00
manuasir
e8ad26a3ca Removed deprecated option 2020-11-03 19:18:10 +01:00
Manuel Gutierrez
a77be1f959
Add custom API user support 2020-10-27 15:02:27 +01:00
Manuel Gutierrez
912d669281
Use standard module format 2020-10-27 15:01:28 +01:00
Manuel Gutierrez
f4b6fa098f
Specify API password requirements on defaults 2020-10-27 15:00:53 +01:00
zenidd
a9f96ff495 Merge branch 'master' into feature-adapt-major-version 2020-10-23 17:30:57 +02:00
Manuel J. Bernal
fec24b4f6d
Merge pull request #467 from wazuh/odfe-1101
Bump ODFE roles to 1.10.1
2020-10-23 17:30:00 +02:00
zenidd
9cac95729b Set empty authd pass 2020-10-23 14:04:18 +02:00
zenidd
2f33aa20c5 New major version fixes 2020-10-23 13:21:32 +02:00
zenidd
dee32f7b79 update wazuh agent repos 2020-10-23 12:37:32 +02:00
zenidd
cab1f1d520 update wazuh repos 2020-10-23 12:36:07 +02:00
zenidd
ac7b80d54e Replace APP URL 2020-10-23 11:36:07 +02:00
zenidd
319261d29f Filebeat module version update 2020-10-23 10:42:46 +02:00
zenidd
09408c3b8c Update windows package md5sum 2020-10-23 10:35:15 +02:00
zenidd
8e784694bb Restoring defaulf configuration 2020-10-20 17:52:38 +02:00
zenidd
583f38f19c Merge master changes 2020-10-20 17:44:26 +02:00
zenidd
5ad76a1e36 Bump versions 2020-10-20 17:40:28 +02:00
zenidd
dbd9b1a52a Update wazuh agent MD5 2020-10-19 14:15:35 +02:00
zenidd
0201da6f0f Bump versions 2020-10-15 18:48:18 +02:00
Manuel J. Bernal
6a6fb15654 Remove vuls block from Linux tasks 2020-10-07 17:03:28 +02:00
Manuel J. Bernal
575fcc966a Remove vuls integration 2020-10-07 16:59:46 +02:00
Manuel Gutierrez
48dda652b2
Update year 2020-10-02 13:13:00 +02:00
zenidd
73764f5db2 Adding latests wazuh packages 2020-10-01 15:52:53 +02:00
manuasir
cb615b1bcf Merge branch '3.13' 2020-09-21 18:46:01 +02:00
zenidd
707aad76ad Bump to Wazuh version v3.13.2 2020-09-18 15:06:21 +02:00
Manuel J. Bernal
8adceb5833 Fixed authorization_pass_path XML option 2020-09-02 00:08:43 +02:00
Manuel J. Bernal
33d4aaedf1 Fixed unreadable token 2020-09-01 23:10:42 +02:00
Manuel J. Bernal
54443102f7 WIP: auto-enrollment implementation 2020-09-01 22:55:53 +02:00
Manuel J. Bernal
b117407c16 Fix unreadable token 2020-09-01 17:23:49 +02:00
zenidd
1bc990769b Merge branch 'feature-adapt-major-version' of github.com:wazuh/wazuh-ansible into feature-adapt-major-version 2020-09-01 17:02:14 +02:00
zenidd
4f68e701f0 Regen the install from sources fil 2020-09-01 17:01:28 +02:00
manuasir
27e913619c Merge remote-tracking branch 'origin/feature-github-actions' into feature-adapt-major-version 2020-09-01 15:36:40 +02:00
Manuel J. Bernal
bc7e1fbb8a Added autoenrollment feature to agent ossec.conf template 2020-09-01 15:31:35 +02:00
zenidd
f2e7a75b09 Using latest SearchGuard tool. Fixing Wazuh API credentials template 2020-08-26 14:05:38 +02:00
zenidd
af88cc4de8 Allow redhat sources install 2020-08-26 13:04:03 +02:00
zenidd
62ecf0325a Enabling sources install 2020-08-26 13:00:19 +02:00
zenidd
1f32a2663b remove tasks 2020-08-26 12:53:11 +02:00
zenidd
2deb53272a Adaptation to Wazuh 4.0 and fixes 2020-08-25 16:02:06 +02:00
zenidd
255d262b62 removing unnecessary old api files 2020-08-24 16:15:02 +02:00
zenidd
1117de8d5f Create new API config template file 2020-08-21 16:17:07 +02:00
Manuel J. Bernal
45a14c128c WIP: Adapting to v4.0 2020-08-12 19:45:46 +02:00
manuasir
f2a527b574 Removed restart systemd tasks 2020-07-29 23:55:41 +02:00
manuasir
ca88611678 Changed manager installation task in Debian family 2020-07-28 16:49:04 +02:00
Manuel J. Bernal
e310b7b766 Fixed check_mode when condition 2020-07-23 12:32:47 +02:00
Manuel J. Bernal
3b87adf8a3
Merge pull request #194 from dsroark-dt/async_ignore_check_mode
ignore check mode for async tasks
2020-07-21 19:06:05 +02:00
Manuel J. Bernal
dd77cb9c20 Added condition to ossec.conf template 2020-07-16 18:26:16 +02:00
Manuel J. Bernal
a6ad44e4b9 Added new options to agent's ossec.conf 2020-07-16 18:03:54 +02:00
Manuel J. Bernal
882780de2c Added new ossec.conf settings 2020-07-14 13:02:07 +02:00
Manuel J. Bernal
970b03a9f2 Bump version 2020-07-14 12:53:55 +02:00
Manuel J. Bernal
ece42099fe
Merge pull request #443 from wazuh/opendistro-demo
Update Opendistro tasks
2020-07-06 20:15:09 +02:00
Hadrien
d6f3d91a46
update check on windows wazuh_agent_authd.agent_name's definition 2020-06-29 18:54:37 +02:00
Jose M
70f534693e
Fix syntax error on filebeat.yml.j2 2020-06-26 13:10:38 +02:00
Jose M
4b8f519256
Make filebeat.yml use node name instaed of inventory_hostname 2020-06-26 13:04:26 +02:00
Jose M
c72ac56b39
Make certs import for Filebeat use 'filebeat_node_name' var 2020-06-26 12:51:29 +02:00
Jose M
799827aa88
Fix syntax error in local_certs_path 2020-06-26 11:26:47 +02:00
Jose M
eab58033b7
Change local_certs_path for Kibana and Filebeat 2020-06-26 11:14:02 +02:00
Zenidd
d82d1b51d1 Adding variable to parametrize elastic template URL 2020-06-23 17:19:37 +02:00
Zenidd
600dd40896 Adding dynamic template fetch to filebeat-oss 2020-06-23 17:03:33 +02:00
Zenidd
eb276a1f73 Handlers refactor 2020-06-23 17:01:32 +02:00
Zenidd
d907793953 Bump to version v3.13.0_7.7.1 2020-06-23 16:51:53 +02:00
Manuel J. Bernal
f5af77811d
Merge pull request #423 from wazuh/feature-422-fix-filebeat-module-var
Test #422 fix filebeat module
2020-06-19 19:00:51 +02:00
Manuel J. Bernal
575ddae995
Merge branch 'devel' into feature-422-fix-filebeat-module-var 2020-06-19 16:28:38 +02:00
Manuel J. Bernal
2212adb5bf
Merge branch 'devel' into wazuh-agent-fixes 2020-06-19 16:25:09 +02:00
Manuel J. Bernal
37dfb5fe12 Resolving conflicts 2020-06-19 12:49:59 +02:00
Manuel J. Bernal
6c630f27d5 Resolved conflicts 2020-06-19 12:46:09 +02:00
Manuel J. Bernal
356f232411
Merge pull request #424 from wazuh/feature-kibana-opendistro
OpenDistro: Kibana + Filebeat-oss
2020-06-18 18:04:49 +02:00
Manuel Gutierrez
9246d7d694
Merge pull request #429 from wazuh/PR425
Merge PR425
2020-06-18 11:46:13 +02:00
Manuel Gutierrez
517fc31932
Merge branch 'master' into devel 2020-06-17 11:03:06 +02:00
Manuel Gutierrez
a3ef437df4
Use relative path by default for certs 2020-06-16 17:33:36 +02:00
Manuel Gutierrez
0b456a25f0
Remove flag to allow exec on deleted cert 2020-06-12 17:38:17 +02:00
Manuel Gutierrez
68cfc2fb10
Remove extra include_tasks 2020-06-12 17:37:02 +02:00
Manuel J. Bernal
79d58c3917 Added support for Filebeat-oss and several improvements 2020-06-04 21:17:33 +02:00
Zenidd
668eaacf96 Replacing root owner with ossec for local decoders/rules 2020-05-29 12:25:18 +02:00
Manuel J. Bernal
f21a7e9c1c - Refactoring security local actions
- Added Filebeat OSS repositories
2020-05-26 21:06:16 +02:00
Pablo Escobar
d9f7e79b7d always use 0770 for the certs folder 2020-05-23 13:20:19 +02:00
Pablo Escobar
f43b885dc8 fix permission override and broken idempotence 2020-05-22 19:28:05 +02:00
Manuel J. Bernal
fdc3b0f55c Lint changes 2020-05-14 18:13:53 +02:00
Manuel J. Bernal
253f05b323
Merge pull request #422 from pescobar/filebeat_role_fix_var_override
fix override of var "filebeat_module_folder"
2020-05-14 17:12:52 +02:00
Pablo Escobar
6073873837 apply permissions 0755 2020-05-13 15:53:43 +02:00
Pablo Escobar
e7bcd54a91 remove leftover debug line 2020-05-13 14:32:09 +02:00
Pablo Escobar
3d74c3a3c3 fix override of var filebeat_module_folder 2020-05-13 13:44:40 +02:00
Manuel J. Bernal
8b278f316b
Merge branch 'feature-126-delegate-registration' into 126-agent-registration 2020-05-12 21:47:29 +02:00
Jose M
459ac46310
Fix API from sources installation conditional 2020-05-08 20:05:28 +02:00
Jose M
100ea616ed
Remove alert_new_files from ossec.conf template 2020-05-01 20:08:50 +02:00
Jose M
12090632a7
Delete "alert_new_files" occurrences 2020-04-30 17:01:24 +02:00
Jose M
e354359e38
Update Agent Windows MD5 2020-04-30 12:25:55 +02:00
Jose M
883ef93af7
Bump version to 3.12.3_7.6.2 2020-04-30 12:22:59 +02:00
Manuel J. Bernal
a543fc7ed1 Added condition disabled in AWS S3 block 2020-04-27 14:31:06 +02:00
Manuel J. Bernal
d1242dbea9
Merge pull request #276 from limitup/3.10.2_7.3.2
Update Manager templates for integrations
2020-04-27 14:20:28 +02:00
Manuel J. Bernal
903e5d53d1
Merge pull request #402 from wazuh/feature-345-oracle2openjdk
Replacing Oracle Java with OpenJDK 1.8
2020-04-15 13:38:59 +02:00
Zenidd
a8d24ff3f8 Removing precise from default vuln-detector config 2020-04-13 13:46:11 +02:00
Zenidd
0c328081e7 Bump version to 3.12.2-7.6.2 2020-04-13 10:35:12 +02:00
Christos Pollalis
ae40cb4582 Split "Copy CA, SSL key and cert for authd" task
of the wazuh-agent playbook to allow one to perform either manager
or agent verification, or both.
2020-04-11 18:26:13 +03:00
Christos Pollalis
f6e020631e Make agent registration via the rest API idempotent
Check whether an error was returned by the HTTP POST to the `agents/`
endpoint before invoking `/var/ossec/bin/manage_agents` in order to
register a new agent.

It seems like that if an agent has already been registered under the
given name, the HTTP POST will return an error that'll cause the next
task, which is meant to retrieve the agent information, to be skipped.
That'll cause the agent registration task to fail in return. Instead,
this change will cause the aforementioned task to be skipped, too. So,
if an agent has already been successfully registered and the playbook
is re-run, it'll run all the way to the end.

If anything goes wrong (during the registration process) and the agent
fails to start, the `restart wazuh-agent` handler will still fail.
2020-04-11 02:15:42 +03:00