---
- when: logstash_install_java
  block:
    - name: RedHat/CentOS/Fedora | download Oracle Java RPM
      get_url:
        url: https://download.oracle.com/otn-pub/java/jdk/8u181-b13/96a7b8442fe848ef90c96a2fad6ed6d1/jre-8u181-linux-x64.rpm
        dest: /tmp/jre-8-linux-x64.rpm
        headers: 'Cookie:oraclelicense=accept-securebackup-cookie'
      register: oracle_java_task_rpm_download

    - name: RedHat/CentOS/Fedora | Install Oracle Java RPM
      package: name=/tmp/jre-8-linux-x64.rpm state=present
      when: oracle_java_task_rpm_download is defined
      register: oracle_java_task_rpm_installed
      tags: install

- name: RedHat/CentOS/Fedora | Install Logstash repo
  yum_repository:
    name: elastic_repo
    description: Elastic repository for 6.x packages
    baseurl: https://artifacts.elastic.co/packages/6.x/yum
    gpgkey: https://artifacts.elastic.co/GPG-KEY-elasticsearch
    gpgcheck: yes

- name: RedHat/CentOS/Fedora | Install Logstash
  package: name=logstash-{{ elastic_stack_version }} state=present
  when: not logstash_install_java or oracle_java_task_rpm_installed is defined
  tags: install

- name: RedHat/CentOS/Fedora | Checking if wazuh-manager is installed
  command: rpm -q wazuh-manager
  register: wazuh_manager_check_rpm
  when: logstash_input_beats == false
  args:
    warn: no

- name: RedHat/CentOS/Fedora | Add user logstash to group ossec
  user:
    name: logstash
    groups: ossec
    append: yes
  when:
    - logstash_input_beats == false
    - wazuh_manager_check_rpm.rc == 0