diff --git a/README.md b/README.md index ab1237c..eec2b2e 100644 --- a/README.md +++ b/README.md @@ -39,6 +39,7 @@ Default attributes from the ossec-server role: 'ossec@example.net', ], "email_from" => 'ossec-server@example.net', + "email_idsname" => 'ossec', "smtp_server" => 'localhost', "white_list" => [ '127.0.0.1', diff --git a/attributes/ossec.rb b/attributes/ossec.rb index ad91c1d..a034036 100644 --- a/attributes/ossec.rb +++ b/attributes/ossec.rb @@ -6,6 +6,7 @@ default["ossec"]["receiver_port"] = "1514" default["ossec"]["log_alert_level"] = "1" default["ossec"]["email_alert_level"] = "7" default["ossec"]["email_maxperhour"] = "9999" +default["ossec"]["email_idsname"] = "ossec" default["ossec"]["memory_size"] = "100000" default["ossec"]["remote"]["connection"] = "secure" default["ossec"]["agents"] = {} diff --git a/libraries/core.rb b/libraries/core.rb index c3b6865..39885f9 100644 --- a/libraries/core.rb +++ b/libraries/core.rb @@ -32,7 +32,7 @@ module OssecCore def ossec_event_location_search() # resolve the location search of an email_alert block to a hostname - node["ossec"]["email_alerts"].each do|recipient,params| + node["ossec"]["email_alerts"].each do |recipient, params| if params.has_key?('event_location_search') if Chef::Config[:solo] Chef::Log.warn('This recipe uses search. Chef Solo does not support search.') diff --git a/metadata.rb b/metadata.rb index f9c6d09..acdc301 100644 --- a/metadata.rb +++ b/metadata.rb @@ -4,7 +4,7 @@ maintainer_email "psi-jack@linux-help.org" license "GPLv2" description "Installs/Configures ossec" long_description IO.read(File.join(File.dirname(__FILE__), 'README.md')) -version "1.2.1" +version "1.2.2" issues_url "http://git.linux-help.org/Linux-Help/ossec-ng/issues" source_url "http://git.linux-help.org/Linux-Help/ossec-ng" diff --git a/templates/default/ossec-server.conf.erb b/templates/default/ossec-server.conf.erb index ff5c1f9..ee78c8a 100644 --- a/templates/default/ossec-server.conf.erb +++ b/templates/default/ossec-server.conf.erb @@ -6,8 +6,9 @@ <%= recipient %> <% end -%> <%= node["ossec"]["smtp_server"] %> - <%= node["ossec"]["email_from"]%> - <%=node["ossec"]["email_maxperhour"]%> + <%= node["ossec"]["email_from"] %> + <%= node["ossec"]["email_maxperhour"] %> + <%= node["ossec"]["email_idsname"] %> <%=node["ossec"]["memory_size"]%> <% node["ossec"]["white_list"].sort_by {|k| k}.each do |ip| -%> <%= ip %> @@ -93,10 +94,27 @@ elsif params.has_key?('resolved_search') locations = params[:resolved_search] end - locations.sort_by {|k| k}.each do |location| -%> + if locations.count > 0 + locations.sort_by {|k| k}.each do |location| -%> <%= recipient %> <%= location %> +<% params.sort_by {|k,v| k}.each do |key, value| + unless key =~ /event_location_tag|event_location_search|resolved_search/ + if key.eql?('tags') + value.sort_by {|k| k}.each do |tag| -%> + <<%= tag %> /> +<% end + else -%> + <<%= key %>><%= value %>> +<% end + end + end -%> + +<% end + else -%> + + <%= recipient %> <% params.sort_by {|k,v| k}.each do |key, value| unless key =~ /event_location_tag|event_location_search|resolved_search/ if key.eql?('tags')