Security Automation with Ansible 2

Installing Beats to send logs to Elastic Stack

As we discussed, Beats are different types. In the following playbook, we are going to install Filebeat to send SSH and web server logs to the Elastic Stack:

- name: adding elastic gpg key for filebeat  apt_key:    url: "https://artifacts.elastic.co/GPG-KEY-elasticsearch"    state: present- name: adding the elastic repository  apt_repository:    repo: "deb https://artifacts.elastic.co/packages/5.x/apt stable main"    state: present- name: installing filebeat  apt:    name: "{{ item }}"    state: present    update_cache: yes  with_items:    - apt-transport-https    - filebeat- name: adding filebeat to the startup programs  service:    name: filebeat    enabled: yes  notify:    - start filebeat

Now we can configure the Filebeat to send ...