nephelaiio.packetbeat

This is an Ansible role to install and set up Packetbeat.

Role Variables

For a current list of input options, check the defaults file.

Dependencies

• nephelaiio.elastic_repo

For more details, please look at the dependency configuration.

Example Playbook

- hosts: servers
  vars:
    packetbeat_package_state: latest
    packetbeat_conf_manage: yes
    packetbeat_conf:
      packetbeat:
        monitors:
          - type: http
            schedule: '*/1 * * * * * *'
            urls:
              - "https://www.google.com"
              - "https://www.amazon.com"
      output:
        elasticsearch:
          enabled: true
          hosts:
            - http://localhost:9200
      setup:
        dashboards:
          enabled: true
          beat: packetbeat
          always_kibana: true
        template:
          enabled: true
        kibana:
          host: http://localhost:80
  roles:
     - role: nephelaiio.packetbeat

Testing

Make sure you have Docker installed to run role validation tests. Additional Python dependencies can be found in the requirements file.

This role is tested on the following systems (Docker images):

• Ubuntu Jammy
• Ubuntu Focal
• Debian Bookworm
• Ubuntu Bullseye
• Rocky Linux 9

You can test the role directly from the source using the command make test.

License

This project is licensed under the MIT License.