---
- name: RedHat/CentOS/Fedora | download Oracle Java RPM
  get_url:
    url: http://download.oracle.com/otn-pub/java/jdk/8u144-b01/090f390dda5b47b9b721c7dfaa008135/jre-8u144-linux-x64.rpm
    dest: /tmp/jdk-8-linux-x64.rpm
    headers: 'Cookie:oraclelicense=accept-securebackup-cookie'
  register: oracle_java_task_rpm_download

- name: RedHat/CentOS/Fedora | Install Oracle Java RPM
  package: name=/tmp/jdk-8-linux-x64.rpm state=present
  when: oracle_java_task_rpm_download is defined
  register: oracle_java_task_rpm_installed
  tags: install

- name: RedHat/CentOS/Fedora | Install Logstash repo
  yum_repository:
    name: elastic_repo
    description: Elastic repository for 5.x packages
    baseurl: https://artifacts.elastic.co/packages/5.x/yum
    gpgkey: https://artifacts.elastic.co/GPG-KEY-elasticsearch
    gpgcheck: yes

- name: RedHat/CentOS/Fedora | Install Logstash
  package: name=logstash-{{ elastic_stack_version }} state=present
  when: oracle_java_task_rpm_installed is defined
  tags: install

- name: RedHat/CentOS/Fedora | Checking if wazuh-manager is installed
  command: rpm -q wazuh-manager
  register: wazuh_manager_check_rpm
  when: logstash_input_beats == false
  args:
    warn: no

- name: RedHat/CentOS/Fedora | Add user logstash to group ossec
  user:
    name: logstash
    groups: ossec
    append: yes
  when:
    - logstash_input_beats == false
    - wazuh_manager_check_rpm.rc == 0