Search guard integration (#58)

* ###

* add var node_name for search guard

* add search-guard conf

* add search-guard conf

* add search-guard conf

* # For Search-Guard

* add search-guard conf

* add search-guard conf

* # For Search-Guard

* # For Search-Guard

* # For Search-Guard

* # For Search-Guard

* # For Search-Guard

* # For Search-Guard

* Create gen_node_cert.sh

* # For Search-Guard

* Fix version of elasticsearch for compatibility with SearchGuard

* Update main.yml

* Update main.yml

* Fix SG

* Fix SG

* Fix SG installation script

* SearchGuard installation script fix + more integration of SG and Kibana, Logstash

* Bump versions of elasticsearch and SG to fix some bugs, more SG integration.

* Some ideas in comments

* Fix tests

* Fix tests

.travis.yml

@@ -36,8 +36,11 @@ script:
 #  - sleep 100
 #  - sudo docker exec "$(cat /tmp/container_id)" whereis java
 #  - sudo docker exec "$(cat /tmp/container_id)" export
-  #Logstash
+  #Logstash Cisco
   - sudo docker exec "$(cat /tmp/container_id)" netstat -lnup | grep "9020"
+  #Logstash Ossec
+  - sudo docker exec "$(cat /tmp/container_id)" netstat -lnup | grep "9000"
+  - sudo docker exec "$(cat /tmp/container_id)" netstat -lntp | grep "9001"
   #Elastcisearch
   - sudo docker exec "$(cat /tmp/container_id)" netstat -lntp | grep "127.0.0.1:9200"
   - sudo docker exec "$(cat /tmp/container_id)" netstat -lntp | grep "127.0.0.1:9300"
@@ -50,4 +53,4 @@ script:
   - sudo docker stop "$(cat /tmp/container_id)"
 
 notifications:
-  email: false
+  email: false

lightsiem-install.yml

@@ -1,6 +1,8 @@
 - name: Install and configure Elasticsearch, Logstash, Kibana
   hosts: localhost
   sudo: yes
-  gather_facts: no
+  gather_facts: yes
+  vars:
+     - node_name: "node_name"
   roles:
-     - elk
+     - elk