wazuh-ansible-4.8.1/CHANGELOG.md
2018-12-05 18:03:02 +01:00

3.0 KiB

Change Log

All notable changes to this project will be documented in this file.

v3.7.0-37xx

Added

  • include template local_internal_options.conf (#87)
  • Add multiple Elasticsearch IPs for Logstash reports.(#92)

Changed

  • Changed windows agent version (#89)

Fixed

  • Solve the conflict betwwen tha agent configuration and the shared master configuration. Also include monitoring for /var/log/auth.log (#90)
  • Moved custom_ruleset files (#98)

Removed

  • clean old code for windows agent (#86)

v3.7.0-3701

Added

  • Amazon Linux deployments are now supported (#71) and for the old repository structure (#67)
  • Added the option to add rule files and decoders directly over the local rule and decoder directories in /var/ossec/etc (#81).
  • Added the necessary variables to configure a new configuration template for the Wazuh API (#80).
  • Added the option to verify the shared configuration for agents set in the manager (#76).
  • Added the option to configure the active response (#75).

Changed

  • Repository restructure.
  • Extended conditions to register a Wazuh agent. Now will register the agent in cases where there is no client.keys or the file exists but this empty (#79).
  • Grouping of tasks in a block under the same condition to improve the efficiency of the code (#74).
  • Improved efficiency of the Java repository (#73).

Fixed

  • Fix oracle java cookie (#71).
  • include the logall_json label in ossec.conf template. This was causing an error when recreating the cdb_lists (#84).

v3.6.0

Ansible starting point.

Roles:

  • Elastic Stack:
    • ansible-elasticsearch: This role is prepared to install elasticsearch on the host that runs it.
    • ansible-logstash: This role involves the installation of logstash on the host that runs it.
    • ansible-kibana: Using this role we will install Kibana on the host that runs it.
  • Wazuh:
    • ansible-filebeat: This role is prepared to install filebeat on the host that runs it.
    • ansible-wazuh-manager: With this role we will install Wazuh manager and Wazuh API on the host that runs it.
    • ansible-wazuh-agent: Using this role we will install Wazuh agent on the host that runs it and is able to register it.