Defined Type: wazuh::activeresponse

Defined in:
manifests/activeresponse.pp

Overview

Copyright © 2015, Wazuh Inc. Define for a specific ossec active-response

Parameters:

  • active_response_name (Any) (defaults to: 'Rendering active-response template')
  • active_response_disabled (Any) (defaults to: undef)
  • active_response_linux_ca_store (Any) (defaults to: undef)
  • active_response_ca_verification (Any) (defaults to: undef)
  • active_response_command (Any) (defaults to: undef)
  • active_response_location (Any) (defaults to: undef)
  • active_response_level (Any) (defaults to: undef)
  • active_response_agent_id (Any) (defaults to: undef)
  • active_response_rules_id (Any) (defaults to: [])
  • active_response_timeout (Any) (defaults to: undef)
  • active_response_repeated_offenders (Any) (defaults to: [])
  • target_arg (Any) (defaults to: 'manager_ossec.conf')
  • order_arg (Any) (defaults to: 80)
  • before_arg (Any) (defaults to: undef)
  • content_arg (Any) (defaults to: 'wazuh/fragments/_activeresponse.erb') 


3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
 
# File 'manifests/activeresponse.pp', line 3

define wazuh::activeresponse (
  $active_response_name               = 'Rendering active-response template',
  $active_response_disabled           = undef,
  $active_response_linux_ca_store     = undef,
  $active_response_ca_verification    = undef,
  $active_response_command            = undef,
  $active_response_location           = undef,
  $active_response_level              = undef,
  $active_response_agent_id           = undef,
  $active_response_rules_id           = [],
  $active_response_timeout            = undef,
  $active_response_repeated_offenders = [],
  $target_arg                         = 'manager_ossec.conf',
  $order_arg                          = 80,
  $before_arg                         = undef,
  $content_arg                        = 'wazuh/fragments/_activeresponse.erb'
) {
  concat::fragment { $active_response_name:
    target  => $target_arg,
    order   => $order_arg,
    before  => $before_arg,
    content => template($content_arg),
  }
}