This role installs and configures Filebeat.
WARNING: This is a very, very early prototype only usable for a very specific environment. DO NOT USE IN PRODUCTION
You need to have Filebeat available in your software repositories. We provide a role for just that but if you have other ways of managing software, just make sure it's available. Alternatively you can install Filebeat yourself.
- filebeat_syslog_udp: Use UDP Syslog input (Default:
false) - filebeat_syslog_udp_port: Port of UDP Syslog input (Default:
514) - filebeat_syslog_tcp: Use TCP Syslog input (Default:
false) - filebeat_syslog_tcp_port: Port of TCP Syslog input (Default:
514) - filebeat_log_input: Enable Logfile reading (Default:
true) - filebeat_log_inputs: Logfiles to read (Default: see below)
Default of filebeat_log_inputs
messages:
name: messages
paths:
- /var/log/messages
- beats_output: Set to
logstashorelasticsearch. (default:logstash) - beats_target_hosts: Only use when this role is used standalone. When used in combination with our other roles, the target hosts will be determined automatically. (default:
localhost)
The following variables only apply if you use this role together with our other Elastic Stack roles.
- elastic_stack_full_stack: Use
ansible-role-elasticsearchas well (default:false) - elastic_ca_dir: Directory where on the Elasticsearch CA host certificates are stored. This is only useful in connection with out other Elastic Stack related roles. (default:
/opt/es-ca) - elastic_ca_pass: Password for Elasticsearch CA (default:
PleaseChangeMe) - elastic_initial_passwords: Path to file with initical elasticsearch passwords (default:
/usr/share/elasticsearch/initial_passwords)
None yet
Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:
- hosts: servers
roles:
- { role: username.rolename, x: 42 }
GPL-3.0-or-later
An optional section for the role authors to include contact information, or a website (HTML is not allowed).