88 lines
2.8 KiB
YAML
88 lines
2.8 KiB
YAML
---
|
|
|
|
- hosts: <node-1 IP>
|
|
roles:
|
|
- role: /etc/ansible/roles/wazuh-ansible/roles/elastic-stack/ansible-elasticsearch
|
|
elasticsearch_network_host: <node-1 IP>
|
|
node_name: node-1
|
|
elasticsearch_bootstrap_node: true
|
|
elasticsearch_cluster_nodes:
|
|
- <node-1 IP>
|
|
- <node-2 IP>
|
|
- <node-3 IP>
|
|
elasticsearch_discovery_nodes:
|
|
- <node-1 IP>
|
|
- <node-2 IP>
|
|
- <node-3 IP>
|
|
elasticsearch_xpack_security: true
|
|
node_certs_generator: true
|
|
elasticsearch_xpack_security_password: elastic_pass
|
|
|
|
vars:
|
|
instances:
|
|
node1:
|
|
name: node-1 # Important: must be equal to elasticsearch_node_name.
|
|
ip: <node-1 IP> # When unzipping, the node will search for its node name folder to get the cert.
|
|
node2:
|
|
name: node-2
|
|
ip: <node-2 IP>
|
|
node3:
|
|
name: node-3
|
|
ip: <node-3 IP>
|
|
|
|
- hosts: <node-2 IP>
|
|
roles:
|
|
- role: /etc/ansible/roles/wazuh-ansible/roles/elastic-stack/ansible-elasticsearch
|
|
elasticsearch_network_host: <node-2 IP>
|
|
elasticsearch_node_name: node-2
|
|
elasticsearch_xpack_security: true
|
|
elasticsearch_master_candidate: true
|
|
elasticsearch_discovery_nodes:
|
|
- <node-1 IP>
|
|
- <node-2 IP>
|
|
- <node-3 IP>
|
|
|
|
- hosts: <node-3 IP>
|
|
roles:
|
|
- role: /etc/ansible/roles/wazuh-ansible/roles/elastic-stack/ansible-elasticsearch
|
|
elasticsearch_network_host: <node-3 IP>
|
|
elasticsearch_node_name: node-3
|
|
elasticsearch_xpack_security: true
|
|
elasticsearch_master_candidate: true
|
|
elasticsearch_discovery_nodes:
|
|
- <node-1 IP>
|
|
- <node-2 IP>
|
|
- <node-3 IP>
|
|
|
|
|
|
# - hosts: 172.16.0.162
|
|
# roles:
|
|
# - role: /etc/ansible/roles/wazuh-ansible/roles/wazuh/ansible-wazuh-manager
|
|
|
|
# - role: /etc/ansible/roles/wazuh-ansible/roles/wazuh/ansible-filebeat
|
|
# filebeat_output_elasticsearch_hosts: 172.16.0.161:9200
|
|
# filebeat_xpack_security: true
|
|
# filebeat_node_name: node-2
|
|
# node_certs_generator: false
|
|
# elasticsearch_xpack_security_password: elastic_pass
|
|
|
|
# - role: /etc/ansible/roles/wazuh-ansible/roles/elastic-stack/ansible-elasticsearch
|
|
# elasticsearch_network_host: 172.16.0.162
|
|
# node_name: node-2
|
|
# elasticsearch_bootstrap_node: false
|
|
# elasticsearch_master_candidate: true
|
|
# elasticsearch_discovery_nodes:
|
|
# - 172.16.0.161
|
|
# - 172.16.0.162
|
|
# elasticsearch_xpack_security: true
|
|
# node_certs_generator: false
|
|
|
|
|
|
# - hosts: 172.16.0.163
|
|
# roles:
|
|
# - role: /etc/ansible/roles/wazuh-ansible/roles/elastic-stack/ansible-kibana
|
|
# kibana_xpack_security: true
|
|
# kibana_node_name: node-3
|
|
# elasticsearch_network_host: 172.16.0.161
|
|
# node_certs_generator: false
|
|
# elasticsearch_xpack_security_password: elastic_pass |