diff --git a/roles/wazuh/ansible-wazuh-manager/defaults/main.yml b/roles/wazuh/ansible-wazuh-manager/defaults/main.yml index d142252..7d5cf2a 100644 --- a/roles/wazuh/ansible-wazuh-manager/defaults/main.yml +++ b/roles/wazuh/ansible-wazuh-manager/defaults/main.yml @@ -21,15 +21,15 @@ agent_groups: [] ## Global wazuh_manager_json_output: 'yes' wazuh_manager_alerts_log: 'yes' -wazuh_manager_logall: 'no' -wazuh_manager_logall_json: 'no' +wazuh_manager_logall: 'yes' +wazuh_manager_logall_json: 'yes' -wazuh_manager_email_notification: 'no' +wazuh_manager_email_notification: 'yes' wazuh_manager_mailto: - - 'admin@example.net' + - 'wazuh@agofer.com.co' -wazuh_manager_email_smtp_server: smtp.example.wazuh.com -wazuh_manager_email_from: wazuh@example.wazuh.com +wazuh_manager_email_smtp_server: servidor2090.bogota.agofer +wazuh_manager_email_from: sistemas@agofer.com.co wazuh_manager_email_maxperhour: 12 wazuh_manager_email_queue_size: 131072 wazuh_manager_email_log_source: 'alerts.log' @@ -51,8 +51,8 @@ wazuh_manager_log_format: 'plain' ## Email alerts wazuh_manager_extra_emails: - - enable: false - mail_to: 'recipient@example.wazuh.com' + - enable: true + mail_to: 'wazuh@agofer.com.co' format: full level: 7 event_location: null @@ -61,7 +61,6 @@ wazuh_manager_extra_emails: do_not_group: false rule_id: null - ## Remote wazuh_manager_connection: - type: 'secure' @@ -71,10 +70,10 @@ wazuh_manager_connection: ## Reports wazuh_manager_reports: - - enable: false + - enable: true category: 'syscheck' title: 'Daily report: File changes' - email_to: 'recipient@example.wazuh.com' + email_to: 'wazuh@agofer.com.co' location: null group: null rule: null @@ -88,13 +87,13 @@ wazuh_manager_rootcheck: frequency: 43200 wazuh_manager_openscap: - disable: 'yes' + disable: 'no' timeout: 1800 interval: '1d' scan_on_start: 'yes' wazuh_manager_ciscat: - disable: 'yes' + disable: 'no' install_java: 'yes' timeout: 1800 interval: '1d' @@ -103,7 +102,7 @@ wazuh_manager_ciscat: ciscat_path: 'wodles/ciscat' wazuh_manager_osquery: - disable: 'yes' + disable: 'no' run_daemon: 'yes' log_path: '/var/log/osquery/osqueryd.results.log' config_path: '/etc/osquery/osquery.conf' @@ -149,7 +148,7 @@ filebeat_output_indexer_hosts: - "localhost" filebeat_output_indexer_port: 9200 indexer_security_user: admin -indexer_security_password: changeme +indexer_security_password: MarkGruflyD3th* filebeat_ssl_dir: /etc/pki/filebeat wazuh_manager_vulnerability_detection: