yes yes {% if wazuh_manager_config.email_notification | lower == "yes" %} yes {% else %} no {% endif %} {% for to in wazuh_manager_config.mail_to %} {{ to }} {% endfor %} {{ wazuh_manager_config.mail_smtp_server }} {{ wazuh_manager_config.mail_from }} {% if wazuh_manager_config.extra_emails is defined %} {% for mail in wazuh_manager_config.extra_emails %} {{ mail.mail_to }} {% if mail.format is defined %} {{ mail.format }} {% endif %} {% if mail.level is defined %} {{ mail.level }} {% endif %} {% if mail.event_location is defined %} {{ mail.event_location }} {% endif %} {% if mail.group is defined %} {{ mail.group }} {% endif %} {% if mail.do_not_delay is defined and mail.do_not_delay == true %} {% endif %} {% if mail.do_not_group is defined and mail.do_not_group == true %} {% endif %} {% if mail.rule_id is defined %} {{ mail.rule_id }} {% endif %} {% endfor %} {% endif %} {% if wazuh_manager_config.reports is defined %} {% for report in wazuh_manager_config.reports %} {{ report.category }} {{ report.title }} {{ report.email_to }} {% if report.location is defined %}{{ report.location }}{% endif %} {% if report.group is defined %}{{ report.group }}{% endif %} {% if report.rule is defined %}{{ report.rule }}{% endif %} {% if report.level is defined %}{{ report.level }}{% endif %} {% if report.srcip is defined %}{{ report.srcip }}{% endif %} {% if report.user is defined %}{{ report.user }}{% endif %} {% if report.showlogs is defined %}{{ report.showlogs }}{% endif %} {% endfor %} {% endif %} {{ wazuh_manager_config.log_level }} {{ wazuh_manager_config.email_level }} {% for connection in wazuh_manager_config.connection %} {{ connection.type }} {{ connection.port }} {{ connection.protocol }} {% endfor %} no yes yes yes yes yes yes yes yes {{ wazuh_manager_config.rootcheck.frequency }} /var/ossec/etc/shared/rootkit_files.txt /var/ossec/etc/shared/rootkit_trojans.txt /var/ossec/etc/shared/system_audit_rcl.txt /var/ossec/etc/shared/system_audit_ssh.txt {% if cis_distribution_filename is defined %} /var/ossec/etc/shared/{{ cis_distribution_filename }} {% endif %} yes {{ wazuh_manager_config.syscheck.frequency }} {{ wazuh_manager_config.syscheck.scan_on_start }} {% if wazuh_manager_config.syscheck.directories is defined %} {% for directory in wazuh_manager_config.syscheck.directories %} {{ directory.dirs }} {% endfor %} {% endif %} {% if wazuh_manager_config.syscheck.ignore is defined %} {% for ignore in wazuh_manager_config.syscheck.ignore %} {{ ignore }} {% endfor %} {% endif %} {% for no_diff in wazuh_manager_config.syscheck.no_diff %} {{ no_diff }} {% endfor %} no {{ wazuh_manager_config.openscap.timeout }} {{ wazuh_manager_config.openscap.interval }} {{ wazuh_manager_config.openscap.scan_on_start }} {% if ansible_distribution == 'Ubuntu' and ansible_distribution_release == 'xenial' %} xccdf_org.ssgproject.content_profile_common {% elif ansible_distribution == 'Debian' and ansible_distribution_release == 'jessie' %} xccdf_org.ssgproject.content_profile_common {% elif ansible_distribution == 'CentOS' %} {% if ansible_distribution_major_version == '7' %} {% elif ansible_distribution_major_version == '6' %} {% endif %} xccdf_org.ssgproject.content_profile_pci-dss xccdf_org.ssgproject.content_profile_common {% elif ansible_distribution == 'RedHat' %} {% if ansible_distribution_major_version == '7' %} {% elif ansible_distribution_major_version == '6' %} {% endif %} xccdf_org.ssgproject.content_profile_pci-dss xccdf_org.ssgproject.content_profile_common {% if ansible_distribution_major_version == '7' %} {% elif ansible_distribution_major_version == '6' %} {% endif %} {% elif ansible_distribution == 'Fedora' %} xccdf_org.ssgproject.content_profile_pci-dss xccdf_org.ssgproject.content_profile_common {% endif %} {% if agentless_creeds is defined %} {% for agentless in agentless_creeds %} {{ agentless.type }} {{ agentless.frequency }} {{ agentless.host }} {{ agentless.state }} {% if agentless.arguments is defined %} {{ agentless.arguments }} {% endif %} {% endfor %} {% endif %} {% for white_list in wazuh_manager_config.globals %} {{ white_list }} {% endfor %} {% for command in wazuh_manager_config.commands %} {{ command.name }} {{ command.executable }} {{ command.expect }} {{ command.timeout_allowed }} {% endfor %} ruleset/decoders ruleset/rules 0215-policy_rules.xml etc/lists/audit-keys etc/decoders etc/rules {% for response in wazuh_manager_config.active_responses %} {{ response.command }} {{ response.location }} {{ response.level }} {{ response.timeout }} {% endfor %} {% for localfile in wazuh_manager_config.localfiles %} {{ localfile.format }} {% if localfile.format == 'command' or localfile.format == 'full_command' %} {{ localfile.command }} {{ localfile.frequency }} {% else %} {{ localfile.location }} {% endif %} {% endfor %} {% if wazuh_manager_config.syslog_outputs is defined %} {% for syslog_output in wazuh_manager_config.syslog_outputs %} {{ syslog_output.server }} {{ syslog_output.port }} {{ syslog_output.format }} {% endfor %} {% endif %}