{{ ossec_server_ip }} {% if ossec_profile is defined %} {{ ossec_profile }} {% endif %} tcp {% if ansible_distribution == 'Ubuntu' and ansible_distribution_release == 'xenial' %} 1800 1d yes xccdf_org.ssgproject.content_profile_common {% elif ansible_distribution == 'CentOS' %} 1800 1d yes {% if ansible_distribution_major_version == '7' %} {% elif ansible_distribution_major_version == '6' %} {% endif %} xccdf_org.ssgproject.content_profile_pci-dss xccdf_org.ssgproject.content_profile_common {% elif ansible_distribution == 'RedHat' %} 1800 1d yes {% if ansible_distribution_major_version == '7' %} {% elif ansible_distribution_major_version == '6' %} {% endif %} xccdf_org.ssgproject.content_profile_pci-dss xccdf_org.ssgproject.content_profile_common {% endif %} no yes yes yes yes yes yes yes yes 43200 /var/ossec/etc/shared/rootkit_files.txt /var/ossec/etc/shared/rootkit_trojans.txt /var/ossec/etc/shared/system_audit_rcl.txt /var/ossec/etc/shared/{{ cis_distribution_filename }} yes {{ ossec_agent_config.frequency_check }} {{ ossec_agent_config.syscheck_scan_on_start }} {% for directory in ossec_agent_config.directories %} {{ directory.dirs }} {% endfor %} {% for ignore_file in ossec_agent_config.ignore_files %} {{ ignore_file }} {% endfor %} {% for no_diff in ossec_agent_config.no_diff %} {{ no_diff }} {% endfor %} {% for localfile in ossec_agent_config.localfiles %} {{ localfile.format }} {% if localfile.format == 'command' or localfile.format == 'full_command' %} {{ localfile.command }} {{ localfile.frequency }} {% else %} {{ localfile.location }} {% endif %} {% endfor %}