Ansible Role: auditbeat

This Ansible Role is for installing and setting up Elastic auditbeat on:

• Ubuntu 18.04 Bionic LTS
• Ubuntu 16.04 Xenial LTS
• Debian 10 Buster
• Debian 9 Stretch
• RHEL 8 UBI
• RHEL 7 UBI
• CentOS 7
• Amazon Linux 2

Requirements

There are no special requirements.

Role Variables

You can find the available variables and their default values listed below (see vars/main-7.2.yml). You can change these variables by creating a dictionary called "auditbeat", for example:

auditbeat:
  version: 7.3.0

Dependencies

There are no dependencies.

Example Playbook

Here's a simple example of how to use this role:

- hosts: all
  roles:
    - apolloclark.auditbeat

Testing

To run tests, follow these steps:

# Run all tests for all supported operating systems
./travis_tests.sh

# Install necessary dependencies and set up pipenv
pip install --user pipenv
pipenv install -r test-requirements.txt --python 2.7

# Run all test scenarios, defaults to Ubuntu 18.04 Bionic
pipenv run molecule test --all

# Run a single test scenario
pipenv run molecule test --scenario=[default]

# Build a specific environment for manual debugging
pipenv run molecule converge
docker exec -it auditbeat-ubuntu_bionic /bin/bash
    cat /etc/os-release
    ps aux
    systemctl status auditbeat
    apt-get install -y net-tools curl nano
    ss -tlu | netstat -tunlp
    curl localhost:8080
    cd /var/log/auditbeat

License

This role is licensed under MIT / BSD.

Author Information

This role was created in 2017 by Apollo Clark.