Ansible Role: exploitdog agent

Role Variables

All variables which can be overridden are stored in defaults/main.yml and are listed in the table below.

Name	Default Value	Description
exploitdog_agent_url	"https://exploitdog.com"	Url Address
exploitdog_agent_token	""	Agent token
exploitdog_agent_proxy	""	Url proxy, must be supported http connect
exploitdog_agent_duration	"8h"	Frequency of data collection, '4h', '8h', '16h', '24h'
exploitdog_agent_enabled_collectors	[]	List of additionally enabled collectors. It adds collectors to those enabled by default
exploitdog_agent_disabled_collectors	[]	List of disabled collectors.
exploitdog_agent_log_type	"file"	Log type: "stdout", "file"
exploitdog_agent_log_level	"info"	Log level: "debug", "info", "warning", "error"

Log:

stdout:

• systemd written in stdout > syslog in SyslogIdentifier=exploitdog_agent

file:

Location: /var/log/exploitdog_agent. Default size of log file rotation is 5mb, directory can contain maximum 10 log files

Collectors

Name	Default Enabled	Description
host-info	✔	Host info, locked to disable
cpu	✔	CPU info
disk	✔	Disk info
memory	✔	Memory info
net-interface	✔	Information about network interfaces
net-port	✔	information about open ports
package	✔	Information about installed packages

Example

Playbook

Use it in a playbook as follows:

- hosts: all
  roles:
    - exploitdog.exploitdog_agent

Uninstall agent

ansible-playbook -i ./inventory ./agent.yaml --extra-vars='uninstall=true'

Local Testing

The preferred way of locally testing the role is to use Docker and molecule (v3.x). You will have to install Docker on your system. See "Get started" for a Docker package suitable for your system. Running your tests is as simple as executing molecule test.