Catchup

roles/Sharingan/files/monit/hostdefs/Node1

@@ -1 +1,2 @@
 include "/etc/monit.d/checks/system"
+include "/etc/monit.d/checks/automated_response"

roles/Sharingan/files/monit/hostdefs/Node2

@@ -1,2 +1,3 @@
 include "/etc/monit.d/checks/system"
+include "/etc/monit.d/checks/automated_response"
 include "/etc/monit.d/checks/cyberpower"

roles/Sharingan/files/monit/hostdefs/Node3

@@ -1 +1,2 @@
 include "/etc/monit.d/checks/system"
+include "/etc/monit.d/checks/automated_response"

roles/Sharingan/tasks/ids.yml

@@ -10,6 +10,7 @@
        - suricata
        - oinkmaster
        - rkhunter
+       - sharingan-scripts
      state: present
 
  # Network IPS

roles/Sharingan/tasks/siem.yml

@@ -4,7 +4,7 @@
    register: sharingan_packages
    package:
      name:
-       - elasticsearch
+       - opensearch
        - mongodb-bin
        - mongodb-tools-bin
        - graylog
@@ -13,7 +13,7 @@
  - name: Sharingan services
    become: yes
    loop:
-       - elasticsearch
+       - opensearch
        - mongodb
        - graylog
    service:
@@ -24,11 +24,11 @@
  - name: Sharingan backups directory
    become: yes
    file:
-     path: /usr/local/backups/elasticsearch
+     path: /usr/local/backups/opensearch
      state: directory
      owner: elasticsearch
      group: elasticsearch
      mode: 0770
 
  - name: Set Sharingan backups
-   command: "curl -X PUT localhost:9200/_snapshot/my_backup?pretty -H 'Content-Type: application/json' -d '{ type: fs, settings: { location: /usr/local/backup/elasticsearch, compress: true } }'"
+   command: "curl -X PUT localhost:9200/_snapshot/my_backup?pretty -H 'Content-Type: application/json' -d '{ type: fs, settings: { location: /usr/local/backup/opensearch, compress: true } }'"