From 33e9150dcd6c152cb2d89c30507097b62bc4464b Mon Sep 17 00:00:00 2001
From: root <carlos.dominguez@wazuh.com>
Date: Wed, 31 Oct 2018 11:50:37 +0000
Subject: [PATCH] active_response_disable configuration

---
 roles/wazuh/ansible-wazuh-agent/defaults/main.yml               | 1 +
 .../templates/var-ossec-etc-ossec-agent.conf.j2                 | 2 +-
 2 files changed, 2 insertions(+), 1 deletion(-)

diff --git a/roles/wazuh/ansible-wazuh-agent/defaults/main.yml b/roles/wazuh/ansible-wazuh-agent/defaults/main.yml
index fefa2b061..db29e6ab3 100644
--- a/roles/wazuh/ansible-wazuh-agent/defaults/main.yml
+++ b/roles/wazuh/ansible-wazuh-agent/defaults/main.yml
@@ -24,6 +24,7 @@ wazuh_winagent_config:
   repo: https://packages.wazuh.com/3.x/windows/
   md5: 935d1993029021f3951b9511e2171207
 wazuh_agent_config:
+  active_response_disabled: 'no'
   log_format: 'plain'
   syscheck:
     frequency: 43200
diff --git a/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2 b/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2
index 6b05b7ba0..982c15794 100644
--- a/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2
+++ b/roles/wazuh/ansible-wazuh-agent/templates/var-ossec-etc-ossec-agent.conf.j2
@@ -36,7 +36,7 @@
   </logging>
 
   <active-response>
-    <disabled>no</disabled>
+    <disabled>{{ wazuh_agent_config.active_response_disabled|default('no') }}</disabled>
   </active-response>
 
   {% if wazuh_agent_config.rootcheck is defined %}