Giter Club home page Giter Club logo

elk-siem-ansible-playbook's Introduction

ELK-SIEM-Ansible-Playbook

Ansible Playbook to install the ELK Stack. To use this playbook follow these steps:

Requirements:

  1. Ansible on a VM or docker container.

  2. Ubuntu VM for installing the ELK SIEM.

For a sample lab deployment, see mine here( and follow the whole series where i show you how to deploy ELK SIEM lab for detection): https://www.youtube.com/watch?v=IwlV3wVX4xs&t=32s

NB we will improve this playbook in the future to include roles and variables, for now lets keep it simple and use the site.yml.

#################

Install ansible on Centos 7 using install_ansible.sh

  1. Clone this repo to your centos machine where you want to install Ansible
  2. RUN cd ELK-SIEM-Ansible-playbook
  3. run sudo ./install_ansible.sh ## This will install the latest version for ansible for you. For more info about this script, please go to: https://github.com/neillturner/omnibus-ansible

###############

Install ELK SIEM using Ansible

  1. Clone this repo into your /etc/ansible folder
  2. change the ip addresses from 192.168.5.71 to your SIEM IP addresses in the site.yml file
  3. Run the Playbook site.yml ( ansible-playbook site.yml) ## This will take a while, get a coffee.
  4. Sign into kibana at http://yoursiemip:5601 6)Next, get some data in your siem.

CREDITS: For the ansible install script: https://github.com/neillturner/omnibus-ansible

elk-siem-ansible-playbook's People

Contributors

lmakonem avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar

elk-siem-ansible-playbook's Issues

Recommend setting services to automatic start

Kibana dashboard loads fine after install, but then I shutdown and snapshot the VM. After reboot couldn't understand why things stopped. Manual installation directions from Elastic make these recommendations.
https://www.elastic.co/guide/en/elasticsearch/reference/current/deb.html

Recommend adding:
sudo /bin/systemctl daemon-reload
sudo /bin/systemctl enable kibana.service
sudo /bin/systemctl enable logstash.service
sudo /bin/systemctl enable elasticsearch.service
sudo /bin/systemctl enable filebeat.service

when i tried to run ansible-playbook i got this. Any idea?

ERROR! Unexpected Exception, this is probably a bug: invalid syntax (specifiers.py, line 39)
the full traceback was:

Traceback (most recent call last):
File "/usr/bin/ansible-playbook", line 104, in
mycli = getattr(import("ansible.cli.%s" % sub, fromlist=[myclass]), myclass)
File "/usr/lib/python2.7/site-packages/ansible/cli/init.py", line 21, in
from ansible.inventory.manager import InventoryManager
File "/usr/lib/python2.7/site-packages/ansible/inventory/manager.py", line 38, in
from ansible.plugins.loader import inventory_loader
File "/usr/lib/python2.7/site-packages/ansible/plugins/loader.py", line 35, in
from packaging.specifiers import SpecifierSet
File "/usr/lib/python2.7/site-packages/packaging/specifiers.py", line 39
class BaseSpecifier(metaclass=abc.ABCMeta):
^
SyntaxError: invalid syntax

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    ๐Ÿ–– Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. ๐Ÿ“Š๐Ÿ“ˆ๐ŸŽ‰

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google โค๏ธ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.