Security Automation with Ansible 2

Installing Logstash

Install Logstash from the repository with gpg key and add it to the startup programs:

- name: adding elastic gpg key for logstash  apt_key:    url: "https://artifacts.elastic.co/GPG-KEY-elasticsearch"    state: present- name: adding the elastic repository  apt_repository:    repo: "deb https://artifacts.elastic.co/packages/5.x/apt stable main"    state: present- name: installing logstash  apt:    name: "{{ item }}"    state: present    update_cache: yes  with_items:    - logstash- name: adding logstash to the startup programs  service:    name: logstash    enabled: yes  notify:    - start logstash

Configure the Logstash service with input, output, and filter settings. This enables receiving logs, processing logs, and sending logs to the Elasticsearch cluster: ...