This role installs and configures Filebeat.

WARNING: This is a very, very early prototype only usable for a very specific environment. DO NOT USE IN PRODUCTION

You need to have Filebeat available in your software repositories. We provide a role for just that but if you have other ways of managing software, just make sure it's available. Alternatively you can install Filebeat yourself.

• filebeat_syslog_udp: Use UDP Syslog input (Default: false)
• filebeat_syslog_udp_port: Port of UDP Syslog input (Default: 514)
• filebeat_syslog_tcp: Use TCP Syslog input (Default: false)
• filebeat_syslog_tcp_port: Port of TCP Syslog input (Default: 514)
• filebeat_log_input: Enable Logfile reading (Default: true)
• filebeat_log_inputs: Logfiles to read (Default: see below)

Default of filebeat_log_inputs

  messages:
    name: messages
    paths:
      - /var/log/messages

• filebeat_output: Set to logstash or elasticsearch. (default: logstash)
• filebeat_target_hosts: Only use when this role is used standalone. When used in combination with our other roles, the target hosts will be determined automatically. (default: localhost)

The following variables only apply if you use this role together with our other Elastic Stack roles.

• elastic_stack_full_stack: Use ansible-role-elasticsearch as well (default: false)
• elastic_ca_dir: Directory where on the Elasticsearch CA host certificates are stored. This is only useful in connection with out other Elastic Stack related roles. (default: /opt/es-ca)
• elastic_ca_pass: Password for Elasticsearch CA (default: PleaseChangeMe)
• elastic_initial_passwords: Path to file with initical elasticsearch passwords (default: /usr/share/elasticsearch/initial_passwords)

None yet

Including an example of how to use your role (for instance, with variables passed in as parameters) is always nice for users too:

- hosts: servers
  roles:
     - { role: username.rolename, x: 42 }

GPL-3.0-or-later

An optional section for the role authors to include contact information, or a website (HTML is not allowed).