Wazuh - Puppet module


Keywords
ossec, hids, wazuh, 40, compliance, elasticsearch, file-integrity-management, hacktoberfest, hacktoberfest-accepted, hacktoberfest2021, incident-response, intrusion-detection, log-analysis, loganalyzer, monitoring, pci-dss, policy-monitoring, puppet, security, security-awareness, security-hardening, vulnerability-detection
License
Apache-2.0
Install
puppet module install wazuh-wazuh --version 4.1.5

Documentation

Wazuh Puppet module

Slack Email Documentation Web Kitchen tests for Wazuh Puppet

This module installs and configure Wazuh agent and manager.

Documentation

Directory structure

wazuh-puppet/
β”œβ”€β”€ CHANGELOG.md
β”œβ”€β”€ checksums.json
β”œβ”€β”€ data
β”‚   └── common.yaml
β”œβ”€β”€ files
β”‚   └── ossec-logrotate.te
β”œβ”€β”€ Gemfile
β”œβ”€β”€ kitchen
β”‚   β”œβ”€β”€ chefignore
β”‚   β”œβ”€β”€ clean.sh
β”‚   β”œβ”€β”€ Gemfile
β”‚   β”œβ”€β”€ hieradata
β”‚   β”‚   β”œβ”€β”€ common.yaml
β”‚   β”‚   └── roles
β”‚   β”‚       └── default.yaml
β”‚   β”œβ”€β”€ kitchen.yml
β”‚   β”œβ”€β”€ manifests
β”‚   β”‚   └── site.pp.template
β”‚   β”œβ”€β”€ Puppetfile
β”‚   β”œβ”€β”€ README.md
β”‚   β”œβ”€β”€ run.sh
β”‚   └── test
β”‚       └── integration
β”‚           β”œβ”€β”€ agent
β”‚           β”‚   └── agent_spec.rb
β”‚           └── mngr
β”‚               └── manager_spec.rb
β”œβ”€β”€ LICENSE.txt
β”œβ”€β”€ manifests
β”‚   β”œβ”€β”€ activeresponse.pp
β”‚   β”œβ”€β”€ addlog.pp
β”‚   β”œβ”€β”€ agent.pp
β”‚   β”œβ”€β”€ audit.pp
β”‚   β”œβ”€β”€ command.pp
β”‚   β”œβ”€β”€ elasticsearch.pp
β”‚   β”œβ”€β”€ email_alert.pp
β”‚   β”œβ”€β”€ filebeat_oss.pp
β”‚   β”œβ”€β”€ filebeat.pp
β”‚   β”œβ”€β”€ init.pp
β”‚   β”œβ”€β”€ integration.pp
β”‚   β”œβ”€β”€ kibana_od.pp
β”‚   β”œβ”€β”€ kibana.pp
β”‚   β”œβ”€β”€ manager.pp
β”‚   β”œβ”€β”€ opendistro.pp
β”‚   β”œβ”€β”€ params_agent.pp
β”‚   β”œβ”€β”€ params_elastic.pp
β”‚   β”œβ”€β”€ params_manager.pp
β”‚   β”œβ”€β”€ params_opendistro.pp
β”‚   β”œβ”€β”€ repo_elastic_oss.pp
β”‚   β”œβ”€β”€ repo_elastic.pp
β”‚   β”œβ”€β”€ repo_opendistro.pp
β”‚   β”œβ”€β”€ repo.pp
β”‚   β”œβ”€β”€ reports.pp
β”‚   └── tests.pp
β”œβ”€β”€ metadata.json
β”œβ”€β”€ Rakefile
β”œβ”€β”€ README.md
β”œβ”€β”€ spec
β”‚   β”œβ”€β”€ classes
β”‚   β”‚   β”œβ”€β”€ client_spec.rb
β”‚   β”‚   β”œβ”€β”€ init_spec.rb
β”‚   β”‚   └── server_spec.rb
β”‚   └── spec_helper.rb
β”œβ”€β”€ templates
β”‚   β”œβ”€β”€ default_commands.erb
β”‚   β”œβ”€β”€ elasticsearch_yml.erb
β”‚   β”œβ”€β”€ filebeat_oss_yml.erb
β”‚   β”œβ”€β”€ filebeat_yml.erb
β”‚   β”œβ”€β”€ fragments
β”‚   β”‚   β”œβ”€β”€ _activeresponse.erb
β”‚   β”‚   β”œβ”€β”€ _auth.erb
β”‚   β”‚   β”œβ”€β”€ _cluster.erb
β”‚   β”‚   β”œβ”€β”€ _command.erb
β”‚   β”‚   β”œβ”€β”€ _default_activeresponse.erb
β”‚   β”‚   β”œβ”€β”€ _email_alert.erb
β”‚   β”‚   β”œβ”€β”€ _integration.erb
β”‚   β”‚   β”œβ”€β”€ _labels.erb
β”‚   β”‚   β”œβ”€β”€ _localfile.erb
β”‚   β”‚   β”œβ”€β”€ _localfile_generation.erb
β”‚   β”‚   β”œβ”€β”€ _reports.erb
β”‚   β”‚   β”œβ”€β”€ _rootcheck.erb
β”‚   β”‚   β”œβ”€β”€ _ruleset.erb
β”‚   β”‚   β”œβ”€β”€ _sca.erb
β”‚   β”‚   β”œβ”€β”€ _syscheck.erb
β”‚   β”‚   β”œβ”€β”€ _syslog_output.erb
β”‚   β”‚   β”œβ”€β”€ _vulnerability_detector.erb
β”‚   β”‚   β”œβ”€β”€ _wodle_cis_cat.erb
β”‚   β”‚   β”œβ”€β”€ _wodle_openscap.erb
β”‚   β”‚   β”œβ”€β”€ _wodle_osquery.erb
β”‚   β”‚   └── _wodle_syscollector.erb
β”‚   β”œβ”€β”€ jvm_options.erb
β”‚   β”œβ”€β”€ kibana_od_yml.erb
β”‚   β”œβ”€β”€ kibana_yml.erb
β”‚   β”œβ”€β”€ local_decoder.xml.erb
β”‚   β”œβ”€β”€ local_rules.xml.erb
β”‚   β”œβ”€β”€ opendistro_yml.erb
β”‚   β”œβ”€β”€ ossec_shared_agent.conf.erb
β”‚   β”œβ”€β”€ process_list.erb
β”‚   β”œβ”€β”€ wazuh_agent.conf.erb
β”‚   β”œβ”€β”€ wazuh_api_yml.erb
β”‚   β”œβ”€β”€ wazuh_manager.conf.erb
β”‚   └── wazuh_yml.erb
└── VERSION

Branches

  • master branch contains the latest code, be aware of possible bugs on this branch.
  • stable branch on correspond to the last Wazuh-Puppet stable version.

Contribute

If you want to contribute to our project please don't hesitate to send a pull request. You can also join our users mailing list or the Wazuh Slack community channel to ask questions and participate in discussions.

Credits and thank you

This Puppet module has been authored by Nicolas Zin, and updated by Jonathan Gazeley and Michael Porter. Wazuh has forked it with the purpose of maintaining it. Thank you to the authors for the contribution.

License and copyright

WAZUH Copyright (C) 2021 Wazuh Inc. (License GPLv2)

Web References