From a15193ffcefd7d87157ff6cf1863885f099d0dcb Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Andr=C3=A9s=20Felipe=20Marulanda=20Hern=C3=A1ndez?= Date: Wed, 4 Dec 2024 22:08:08 +0000 Subject: [PATCH] Update roles/wazuh/ansible-wazuh-manager/defaults/main.yml --- .../ansible-wazuh-manager/defaults/main.yml | 29 +++++++++---------- 1 file changed, 14 insertions(+), 15 deletions(-) diff --git a/roles/wazuh/ansible-wazuh-manager/defaults/main.yml b/roles/wazuh/ansible-wazuh-manager/defaults/main.yml index 305bcf8..86d17c4 100644 --- a/roles/wazuh/ansible-wazuh-manager/defaults/main.yml +++ b/roles/wazuh/ansible-wazuh-manager/defaults/main.yml @@ -16,20 +16,20 @@ wazuh_dir: "/var/ossec" ########################################## # groups to create -agent_groups: [] +agent_groups: [Sysadmin,Servidores,Containers,DMZ,Escritorio,Portatil] ## Global wazuh_manager_json_output: 'yes' wazuh_manager_alerts_log: 'yes' -wazuh_manager_logall: 'no' -wazuh_manager_logall_json: 'no' +wazuh_manager_logall: 'yes' +wazuh_manager_logall_json: 'yes' -wazuh_manager_email_notification: 'no' +wazuh_manager_email_notification: 'yes' wazuh_manager_mailto: - - 'admin@example.net' + - 'wazuh@agofer.com.co' -wazuh_manager_email_smtp_server: smtp.example.wazuh.com -wazuh_manager_email_from: wazuh@example.wazuh.com +wazuh_manager_email_smtp_server: servidor2090.bogota.agofer +wazuh_manager_email_from: sistemas@agofer.com.co wazuh_manager_email_maxperhour: 12 wazuh_manager_email_queue_size: 131072 wazuh_manager_email_log_source: 'alerts.log' @@ -51,8 +51,8 @@ wazuh_manager_log_format: 'plain' ## Email alerts wazuh_manager_extra_emails: - - enable: false - mail_to: 'recipient@example.wazuh.com' + - enable: true + mail_to: 'wazuh@agofer.com.co' format: full level: 7 event_location: null @@ -61,7 +61,6 @@ wazuh_manager_extra_emails: do_not_group: false rule_id: null - ## Remote wazuh_manager_connection: - type: 'secure' @@ -71,10 +70,10 @@ wazuh_manager_connection: ## Reports wazuh_manager_reports: - - enable: false + - enable: true category: 'syscheck' title: 'Daily report: File changes' - email_to: 'recipient@example.wazuh.com' + email_to: 'wazuh@agofer.com.co' location: null group: null rule: null @@ -88,13 +87,13 @@ wazuh_manager_rootcheck: frequency: 43200 wazuh_manager_openscap: - disable: 'yes' + disable: 'no' timeout: 1800 interval: '1d' scan_on_start: 'yes' wazuh_manager_ciscat: - disable: 'yes' + disable: 'no' install_java: 'yes' timeout: 1800 interval: '1d' @@ -149,7 +148,7 @@ filebeat_output_indexer_hosts: - "localhost" filebeat_output_indexer_port: 9200 indexer_security_user: admin -indexer_security_password: changeme +indexer_security_password: MarkGruflyD3th* filebeat_ssl_dir: /etc/pki/filebeat wazuh_manager_vulnerability_detection: