Ansible/Playbooks/Install_Wazuh_Ubuntu_Server.yaml

---
- name: Install Wazuh Agent on Ubuntu
  hosts: ubuntu_hosts
  become: yes  # Run tasks with sudo

  tasks:
    - name: Download Wazuh Agent Debian package
      get_url:
        url: "https://packages.wazuh.com/4.x/apt/pool/main/w/wazuh-agent/wazuh-agent_4.6.0-1_amd64.deb"
        dest: "/tmp/wazuh-agent_4.6.0-1_amd64.deb"

    - name: Install Wazuh Agent using dpkg
      apt:
        deb: "/tmp/wazuh-agent_4.6.0-1_amd64.deb"

    - name: Set Wazuh Manager and Agent Group
      lineinfile:
        path: /var/ossec/etc/ossec.conf
        regexp: '^\s*<client>'
        line: |
          <client>
            <server-ip>wazuh.hagood.us</server-ip>
            <agent_group>Servers,Ubuntu,Linux</agent_group>
          </client>
        backup: yes

    - name: Reload Systemd and Enable/Start Wazuh Agent
      systemd:
        name: wazuh-agent
        state: restarted
        enabled: yes