nephelaiio.packetbeat

An ansible role to install and configure packetbeat

Role Variables

Please refer to the defaults file for an up to date list of input parameters.

Dependencies

• nephelaiio.elastic_repo

Please review the dependency configuration for more details

Example Playbook

- hosts: servers
  vars:
    packetbeat_package_state: latest
    packetbeat_conf_manage: yes
    packetbeat_conf:
      packetbeat:
        monitors:
          - type: http
            schedule: '*/1 * * * * * *'
            urls:
              - "https://www.google.com"
              - "https://www.amazon.com"
      output:
        elasticsearch:
          enabled: true
          hosts:
            - http://localhost:9200
      setup:
        dashboards:
          enabled: true
          beat: packetbeat
          always_kibana: true
        template:
          enabled: true
        kibana:
          host: http://localhost:80
  roles:
     - role: nephelaiio.packetbeat

Testing

Please make sure your environment has docker installed in order to run role validation tests. Additional python dependencies are listed in the requirements file

Role is tested against the following distributions (docker images):

• Ubuntu Jammy
• Ubuntu Focal
• Debian Bookworm
• Ubuntu Bullseye
• Rocky Linux 9

You can test the role directly from sources using command make test

License

This project is licensed under the terms of the MIT License