Merge pull request #30 from xneelo/dk_audit_vmailmgr

Support filebeat modules
xneelo · Feb 6, 2020 · b3aba38 · b3aba38
2 parents 30dfd40 + 01fa072
commit b3aba38
Show file tree

Hide file tree

Showing 3 changed files with 32 additions and 0 deletions.
diff --git a/manifests/config.pp b/manifests/config.pp
@@ -30,6 +30,8 @@
   Array   $logstash_ssl_certificate_authorities,
   String  $logstash_ssl_certificate_key,
   String  $logstash_ttl,
+  Hash    $modules,
+  String  $modules_conf_dir,
   Array   $prospectors,
 ){
   $config_path = $filebeats::params::config_path
@@ -67,4 +69,25 @@
     notify  => Service['filebeat'],
   }
 
+#TODO turn this into a puppet resource
+  $modules.each | String $action, Array $module_name | {
+    $module_name.each | String $module| {
+      if $action == 'enable' {
+        exec { "filebeat_${module}_${action}":
+          command => "filebeat modules ${action} ${module}",
+          creates => "${modules_conf_dir}/${module}.yml",
+          require => Package['filebeat'],
+          notify  => Service['filebeat'],
+        }
+      } else {
+        exec { "filebeat_${module}_${action}":
+          command => "filebeat modules ${action} ${module}",
+          creates => "${modules_conf_dir}/${module}.yml.disabled",
+          require => Package['filebeat'],
+          notify  => Service['filebeat'],
+        }
+      }
+    }
+  }
+
 }
diff --git a/manifests/init.pp b/manifests/init.pp
@@ -100,6 +100,8 @@
   $logstash_ssl_certificate_key              = $filebeats::params::logstash_ssl_certificate_key,
   $logstash_ttl                              = $filebeats::params::logstash_ttl,
   $logstash_worker                           = $filebeats::params::logstash_worker,
+  $modules                                   = $filebeats::params::modules,
+  $modules_conf_dir                          = $filebeats::params::modules_conf_dir,
   $prospectors                               = $filebeats::params::prospectors,
   $service_bootstrapped                      = $filebeats::params::service_bootstrapped,
   $service_state                             = $filebeats::params::service_state,
@@ -138,6 +140,8 @@
     logstash_ssl_certificate_key              => $logstash_ssl_certificate_key,
     logstash_ttl                              => $logstash_ttl,
     logstash_worker                           => $logstash_worker,
+    modules                                   => $modules,
+    modules_conf_dir                          => $modules_conf_dir,
     prospectors                               => $prospectors,
   }
 

diff --git a/manifests/params.pp b/manifests/params.pp
@@ -23,6 +23,11 @@
   $logstash_ssl_certificate_authorities      = []
   $logstash_ssl_certificate_key              = ''
   $logstash_ttl                              = ''
+  $modules                                   = {
+                                                  enable => [],
+                                                  disable => []
+                                               }
+  $modules_conf_dir                          = '/etc/filebeat/modules.d'
   $prospectors                               = []
   $service_bootstrapped                      = true
   $service_state                             = 'running'