forked from wazuh/wazuh-docker
48 lines
1.5 KiB
Bash
48 lines
1.5 KiB
Bash
#!/bin/bash
|
|
# Wazuh App Copyright (C) 2019 Wazuh Inc. (License GPLv2)
|
|
|
|
set -e
|
|
|
|
WAZUH_FILEBEAT_MODULE=wazuh-filebeat-0.1.tar.gz
|
|
|
|
if [ "$ELASTICSEARCH_URL" != "" ]; then
|
|
>&2 echo "Customize Elasticsearch ouput IP."
|
|
sed -i 's|http://elasticsearch:9200|'$ELASTICSEARCH_URL'|g' /etc/filebeat/filebeat.yml
|
|
fi
|
|
|
|
# Install Wazuh Filebeat Module
|
|
|
|
curl -s "https://packages.wazuh.com/3.x/filebeat/${WAZUH_FILEBEAT_MODULE}" | tar -xvz -C /usr/share/filebeat/module
|
|
mkdir -p /usr/share/filebeat/module/wazuh
|
|
chmod 755 -R /usr/share/filebeat/module/wazuh
|
|
|
|
chown root: /etc/filebeat/filebeat.yml
|
|
chmod go-w /etc/filebeat/filebeat.yml
|
|
|
|
# Configure filebeat.yml security settings
|
|
|
|
if [ "$SSL_CERTIFICATE_AUTHORITIES" != "" ]; then
|
|
>&2 echo "Customize Elasticsearch ouput IP."
|
|
sed -i 's|#ssl.certificate_authorities:|'ssl.certificate_authorities:\ [\"$SSL_CERTIFICATE\"]'|g' /etc/filebeat/filebeat.yml
|
|
fi
|
|
|
|
if [ "$SSL_CERTIFICATE" != "" ]; then
|
|
>&2 echo "Customize Elasticsearch ouput IP."
|
|
sed -i 's|#ssl.certificate:|'ssl.certificate:\ \"$SSL_CERTIFICATE\"'|g' /etc/filebeat/filebeat.yml
|
|
fi
|
|
|
|
if [ "$SSL_KEY" != "" ]; then
|
|
>&2 echo "Customize Elasticsearch ouput IP."
|
|
sed -i 's|#ssl.key:|'ssl.key:\ \"$SSL_KEY\"'|g' /etc/filebeat/filebeat.yml
|
|
fi
|
|
|
|
if [ "$USERNAME" != "" ]; then
|
|
>&2 echo "Customize Elasticsearch ouput IP."
|
|
sed -i 's|#username:|'username:\ \"$USERNAME\"'|g' /etc/filebeat/filebeat.yml
|
|
fi
|
|
|
|
if [ "$PASSWORD" != "" ]; then
|
|
>&2 echo "Customize Elasticsearch ouput IP."
|
|
sed -i 's|#password:|'password:\ \"$PASSWORD\"'|g' /etc/filebeat/filebeat.yml
|
|
fi
|