License

Apache V2

Currently this module only works on Debian and possibly Ubuntu (untested). It's designed to pull down the Debian installer from the official downloads site using the maestrodev-wget module, so ensure you have that installed.

Example Use

include ::packetbeat

That should install Packetbeat for you and enable the default Elasticsearch output with default host and port (localhost:9200)

If you want to configure further, you can do

class {'packetbeat':
  es_host => '10.0.0.20',
  es_port => '9200',
}

To enable the protocol monitors, you'll need to include the right protocol class as follows include ::packetbeat::protocols::http

This will create an http protocol listener on ports 80, 8000 and 8080, capturing the Host, Cookie and X-Forwarded-For headers in addition to the defaults.

All the parameters are overrideable. Look in the manifests for more information - I'll flesh out the docs when I have time. Failing that, feel free to fork this and submit a pull request.