diff --git a/ansible/globals/globals.yml b/ansible/globals/globals.yml index c94480bd62ee998af30e164669789c19d356523d..307fa0a1a354f4b48b3d1d7d13e9aea735f73ea5 100644 --- a/ansible/globals/globals.yml +++ b/ansible/globals/globals.yml @@ -3,4 +3,5 @@ custom_integration_hook: 'http://10.0.2.2:8088' custom_integration_alert_level: 10 custom_integration_alert_format: 'json' elasticsearch_host_ip: '192.168.33.10' -wazuh_manager_ip: '192.168.33.10' \ No newline at end of file +wazuh_manager_ip: '192.168.33.10' +wazuh_check_interval: 300 \ No newline at end of file diff --git a/ansible/provision-managers.yml b/ansible/provision-managers.yml index 9447c0f0c533b3733d81d1753f1a0129c8140bf3..d3295f8beeb1387520fac8d73c73ec86a0cbbb11 100644 --- a/ansible/provision-managers.yml +++ b/ansible/provision-managers.yml @@ -13,9 +13,7 @@ - role: custom-integration vars: single_node: true - ## Set-up integrations wazuh_manager_integrations: - # custom-integration - name: custom-integration hook_url: "{{ custom_integration_hook }}" alert_level: "{{ custom_integration_alert_level }}" @@ -27,6 +25,35 @@ elasticsearch_network_host: "0.0.0.0" filebeat_node_name: node-1 filebeat_output_elasticsearch_hosts: "{{ elasticsearch_host_ip }}" + wazuh_manager_vulnerability_detector: + enabled: 'yes' + interval: "{{ wazuh_check_interval }}" + ignore_time: "{{ wazuh_check_interval }}" + run_on_start: 'yes' + providers: + - enabled: 'yes' + os: + - 'trusty' + - 'xenial' + - 'bionic' + update_interval: "{{ wazuh_check_interval }}" + name: '"canonical"' + - enabled: 'yes' + os: + - 'wheezy' + - 'stretch' + - 'jessie' + - 'buster' + update_interval: "{{ wazuh_check_interval }}" + name: '"debian"' + - enabled: 'yes' + update_from_year: '2010' + update_interval: "{{ wazuh_check_interval }}" + name: '"redhat"' + - enabled: 'yes' + update_from_year: '2010' + update_interval: "{{ wazuh_check_interval }}" + name: '"nvd"' instances: node1: name: node-1 # Important: must be equal to elasticsearch_node_name. @@ -51,4 +78,5 @@ - {port: "1514", proto: "tcp", state: "enabled", zone: "public"} - {port: "1515", proto: "tcp", state: "enabled", zone: "public"} - {port: "55000", proto: "tcp", state: "enabled", zone: "public"} - - {port: "5601", proto: "tcp", state: "enabled", zone: "public"} \ No newline at end of file + - {port: "5601", proto: "tcp", state: "enabled", zone: "public"} + - {port: "9200", proto: "tcp", state: "enabled", zone: "public"} \ No newline at end of file diff --git a/custom-provision/.env b/custom-provision/.env index 1f87306457f5bec96a3d6627352fb2ca13225937..f4ee6b4aca099d9579db6a2876ceac59f216e8e0 100644 --- a/custom-provision/.env +++ b/custom-provision/.env @@ -15,3 +15,4 @@ clouditor_port=9090 clouditor_oauth2_port=8080 clouditor_client_id=clouditor clouditor_client_secret=clouditor +wazuh_check_interval=300 \ No newline at end of file diff --git a/environments/full-setup/.env b/environments/full-setup/.env index 19db6de01c06a07189681e0154b32d01ed52a36e..6807497239268b89548c60c58072abb408cab028 100644 --- a/environments/full-setup/.env +++ b/environments/full-setup/.env @@ -15,3 +15,4 @@ clouditor_port=9090 clouditor_oauth2_port=8080 clouditor_client_id=clouditor clouditor_client_secret=clouditor +wazuh_check_interval=300 \ No newline at end of file