wazuh-ansible-4.8.1/CHANGELOG.md

Change Log

All notable changes to this project will be documented in this file.

[v3.7.x]

Changed

• Changed Windows installation directory (#116)

Fixed

• Fixed a couple linting issues with yamllint and ansible-review (#111)

[v3.7.2]

Changed

• Adapt configuration to current release (#106)

[v3.7.1]

Added

• include template local_internal_options.conf. (#87)
• Add multiple Elasticsearch IPs for Logstash reports. (#92)

Changed

• Changed windows agent version. (#89)
• Updating to Elastic Stack to 6.5.3 and Wazuh 3.7.1. (#108)

Fixed

• Solve the conflict betwwen tha agent configuration and the shared master configuration. Also include monitoring for /var/log/auth.log. (#90)
• Moved custom_ruleset files. (#98)
• Add authlog fix to localfile. (#99)
• Exceptions reload systemd. (#114)

Removed

• clean old code for windows agent. (#86)

v3.7.0-3701

Added

• Amazon Linux deployments are now supported (#71) and for the old repository structure (#67)
• Added the option to add rule files and decoders directly over the local rule and decoder directories in /var/ossec/etc (#81).
• Added the necessary variables to configure a new configuration template for the Wazuh API (#80).
• Added the option to verify the shared configuration for agents set in the manager (#76).
• Added the option to configure the active response (#75).

Changed

• Repository restructure.
• Extended conditions to register a Wazuh agent. Now will register the agent in cases where there is no client.keys or the file exists but this empty (#79).
• Grouping of tasks in a block under the same condition to improve the efficiency of the code (#74).
• Improved efficiency of the Java repository (#73).

Fixed

• Fix oracle java cookie (#71).
• include the logall_json label in ossec.conf template. This was causing an error when recreating the cdb_lists (#84).

v3.6.0

Ansible starting point.

Roles:

• Elastic Stack:
  • ansible-elasticsearch: This role is prepared to install elasticsearch on the host that runs it.
  • ansible-logstash: This role involves the installation of logstash on the host that runs it.
  • ansible-kibana: Using this role we will install Kibana on the host that runs it.
• Wazuh:
  • ansible-filebeat: This role is prepared to install filebeat on the host that runs it.
  • ansible-wazuh-manager: With this role we will install Wazuh manager and Wazuh API on the host that runs it.
  • ansible-wazuh-agent: Using this role we will install Wazuh agent on the host that runs it and is able to register it.