auditbeat

Ansible Role: auditbeat

Ansible Role to install and configure Elastic auditbeat for:

Ubuntu 18.04 Bionic LTS
Ubuntu 16.04 Xenial LTS
Debian 10 Buster
Debian 9 Stretch
RHEL 8 UBI
RHEL 7 UBI
CentOS 7
Amazon Linux 2

Requirements

None.

Role Variables

Available variables are listed below, along with default values (see vars/main-7.2.yml). You can overload the variables by creating a dictionary called "auditbeat", ex:

auditbeat:
  version: 7.3.0

Dependencies

None.

Example Playbook

- hosts: all
  roles:
    - apolloclark.auditbeat

Testing

# run all tests, against all supported OSes
./travis_tests.sh



# install dependencies, setup pipenv
pip install --user pipenv
pipenv install -r test-requirements.txt --python 2.7

# run all test scenarios, defaults to Ubuntu 18.04 Bionic
pipenv run molecule test --all

# run a single test scenario
pipenv run molecule test --scenario=[default]

# build a specific environment, for manual debugging
pipenv run molecule converge
docker exec -it auditbeat-ubuntu_bionic /bin/bash
    cat /etc/os-release
    ps aux
    systemctl status auditbeat
    apt-get install -y net-tools curl nano
    ss -tlu | netstat -tunlp
    curl localhost:8080
    cd /var/log/auditbeat