72 lines
1.8 KiB
YAML
72 lines
1.8 KiB
YAML
---
|
|
- include: RedHat.yml
|
|
when: ansible_os_family == 'RedHat'
|
|
|
|
- name: Configure Elasticsearch.
|
|
template:
|
|
src: elasticsearch.yml.j2
|
|
dest: /etc/elasticsearch/elasticsearch.yml
|
|
owner: root
|
|
group: elasticsearch
|
|
mode: 0660
|
|
notify: restart elasticsearch
|
|
|
|
- name: Configure Elasticsearch JVM memmory.
|
|
template:
|
|
src: jvm.options.j2
|
|
dest: /etc/elasticsearch/jvm.options
|
|
owner: root
|
|
group: elasticsearch
|
|
mode: 0660
|
|
notify: restart elasticsearch
|
|
|
|
- name: Start Elasticsearch.
|
|
service: name=elasticsearch state=started enabled=yes
|
|
|
|
- name: Make sure Elasticsearch is running before proceeding.
|
|
wait_for: host={{ elasticsearch_network_host }} port={{ elasticsearch_http_port }} delay=3 timeout=300
|
|
|
|
- name: Logstash configuration
|
|
template:
|
|
src: 01-wazuh.conf.j2
|
|
dest: /etc/logstash/conf.d/01-wazuh.conf
|
|
owner: root
|
|
group: root
|
|
notify: restart logstash
|
|
|
|
- name: Logstash template
|
|
template:
|
|
src: wazuh-elastic5-template.json.j2
|
|
dest: /etc/logstash/wazuh-elastic5-template.json
|
|
owner: root
|
|
group: root
|
|
notify: restart logstash
|
|
|
|
- name: Kibana configuration
|
|
template:
|
|
src: kibana.yml.j2
|
|
dest: /etc/kibana/kibana.yml
|
|
owner: root
|
|
group: root
|
|
mode: 0664
|
|
notify: restart kibana
|
|
|
|
|
|
- name: Verify if Wazuh-APP is installed
|
|
command: /bin/bash /usr/share/kibana/bin/kibana-plugin list
|
|
register: kibanainstalled
|
|
|
|
- name: Install Wazuh-APP (can take a while)
|
|
shell: /usr/share/kibana/bin/kibana-plugin install https://packages.wazuh.com/wazuhapp/wazuhapp-2.0_5.2.2.zip && service kibana restart
|
|
when: kibanainstalled.stdout.find('wazuh') == -1
|
|
|
|
- name: Ensure Logstash, Kibana and Elasticsearch started and enabled
|
|
service:
|
|
name: "{{ item }}"
|
|
enabled: yes
|
|
state: started
|
|
with_items:
|
|
- logstash
|
|
- elasticsearch
|
|
- kibana
|