Заметки Эникейщика

ERROR! Problem running vault password script / c y g d r i v e / c / g i t / qqqq/ v a u l t . k e y ([Errno 8] Exec format error). If this is not a script, remove the executable bit from the file.

Решение:
chmod 0600 vault.key

[Ansible] приоритет переменных

by CTAPOMAK

role defaults
inventory vars
inventory group_vars
inventory host_vars
playbook group_vars
playbook host_vars
host facts
play vars
play vars_prompt
play vars_files
registered vars
set_facts
role and include vars
block vars (only for tasks in block)
task vars (only for the task)
extra vars (always win precedence)

[Ansible] service Interactive authentication required.

by CTAPOMAK

При выполнении плейбука с

- name: Старт сервиса
  become: true
  service:
    name: httpd
    state: started

- name: Старт сервиса

become: true

service:

name: httpd

state: started

Получаем ошибку: Failed to restart httpd.service: Interactive authentication required

Continue reading "[Ansible] service Interactive authentication required." →

[ELK] filebeat json

by CTAPOMAK

vim /etc/filebeat/filebeat.yml

- input_type: log
  paths:
    - /var/www/site.ru/htdocs/logs/logs.log
  document_type: elk-json
  json:
#    message_key: datetime
    keys_under_root: true
    json.add_error_key: true
    json.overwrite_keys: false

#  fields:
#    app: "site.ru - json"

- input_type: log

paths:

- /var/www/site.ru/htdocs/logs/logs.log

document_type: elk-json

json:

# message_key: datetime

keys_under_root: true

json.add_error_key: true

json.overwrite_keys: false

# fields:

# app: "site.ru - json"

[ELK] filebeat multiline Tomcat

by CTAPOMAK

vim /etc/filebeat/filebeat.yml

#================= Tomcat ================
- input_type: log
  paths:
    - /opt/tomcat/logs/catalina.*.log
    - /opt/tomcat/logs/localhost.*.log
  document_type: elk-tomcat
  fields_under_root: true
  fields.app: "tomcat"
  multiline:
    pattern: ^(\w{1,5} \d{1,2}, \d{4} \d{1,2}:\d{1,2}:\d{1,2} \w{1,2})
    negate: true
    match: after

- input_type: log
  paths:
    - /opt/tomcat/logs/localhost_access_log.*.txt
  document_type: elk-tomcat
  fields_under_root: true
  fields.app: "tomcat"
  multiline:
    pattern: (\d{1,3}\.\d{1,3}.\d{1,3}.\d{1,3} - - \[\d{1,2}\/\w{1,3}\/\d{1,4}:\d{1,2}:\d{1,2}:\d{1,2} \+\d)
    negate: true
    match: after
#=============== Tomcat END ==============

#================= Tomcat ================

- input_type: log

paths:

- /opt/tomcat/logs/catalina.*.log

- /opt/tomcat/logs/localhost.*.log

document_type: elk-tomcat

fields_under_root: true

fields.app: "tomcat"

multiline:

pattern: ^(\w{1,5} \d{1,2}, \d{4} \d{1,2}:\d{1,2}:\d{1,2} \w{1,2})

negate: true

match: after

- input_type: log

paths:

- /opt/tomcat/logs/localhost_access_log.*.txt

document_type: elk-tomcat

fields_under_root: true

fields.app: "tomcat"

multiline:

pattern: (\d{1,3}\.\d{1,3}.\d{1,3}.\d{1,3} - - \[\d{1,2}\/\w{1,3}\/\d{1,4}:\d{1,2}:\d{1,2}:\d{1,2} \+\d)

negate: true

match: after

#=============== Tomcat END ==============

[PowerShell] Выполнение команд PowerShell из-под другого пользователя

by CTAPOMAK

Start-Process powershell.exe -Credential "domain\user"

[AD] найти группу с помощью powershell

by CTAPOMAK

get-adobject -Filter 'ObjectClass -eq "group"' | Select-String "GroupName"

--пользака

get-adobject -Filter 'ObjectClass -eq "user"' | Select-String "userName"

AD администрирование в PowerShell

AD администрирование в PowerShell

by CTAPOMAK

Open Control Panel -> Programs and Features -> Turn On/Off Windows Features
Find "Remote Server Administration Tools" and expand it
Find "Role Administration Tools" and expand it
Find "AD DS And AD LDS Tools" and expand it
Check the box next to "Active Directory Module For Windows PowerShell".
Click OK and allow Windows to install the feature