playbooks/roles/logcheck/tasks/main.yml

   1 - name: Install logcheck (Debian)
   2   become: true
   3   apt:
   4     autoclean: yes
   5     autoremove: yes
   6     cache_valid_time: 3600
   7     install_recommends: no
   8     name: logcheck
   9     state: latest
  10     update_cache: yes
  11   when: ansible_facts.os_family == 'Debian'
  12
  13 - name: Install logcheck (RedHat)
  14   become: true
  15   dnf:
  16     name: logcheck
  17     state: latest
  18     update_cache: yes
  19   when: ansible_facts.os_family == 'RedHat'
  20
  21 - name: Configure logcheck - intro
  22   become: true
  23   lineinfile:
  24     path: /etc/logcheck/logcheck.conf
  25     regexp: "^INTRO=0$"
  26     line: "INTRO=0"
  27     insertafter: "^#INTRO=1$"
  28
  29 - name: Configure logcheck - send email to root
  30   become: true
  31   lineinfile:
  32     path: /etc/aliases
  33     line: 'logcheck: root'
  34
  35 - name: Update logcheck ignore files
  36   become: true
  37   copy:
  38     src: ignore.d/
  39     dest: "/etc/logcheck/ignore.d.{{ item }}"
  40     owner: root
  41     group: logcheck
  42     directory_mode: '0750'
  43     mode: 0640
  44   loop: ['server', 'workstation']