FIM System tests. 0210: Scheduled scan

[DFolchA]

Hello team,

This issue is related to #493 . It will contain the advances related to the creation of scenario 210.

Objectives

Implement scenario 210.

Tasks

• Create ossec.conf
• Create launch_scenario.yml
• • Wait for the scan.
• • Check that the scan was executed at the right time.
• • Create/Delete/modify the necessary files.
• • Check alerts in alerts.json.
• • Check alerts in Elasticsearch.

Regards,
Daniel Folch

[DFolchA]

Hello team,

I have created a python script that checks how much time has passed between scans and waits for the ongoing scans to finish.

I have also created new handlers to clean the osec.log file for convenience and created the launch_environment.yml playbook that:

• Prepares the environment (common task)
• Sets the scenario variables, eg frequency.
• Restarts Wazuh and cleans the ossec.log of the agents (handlers).
• Creates/modifies/deletes files (common tasks).
• Checks if the scans are producing at the right time (check_scheduled_scan.py).
• Waits for the ongoing scan to end (check_scheduled_scan.py).
• Checks if the alerts are correct (common tasks)

Working branch:
https://github.com/wazuh/wazuh-qa/tree/feature-553-scenario-210

Remaining tasks:

• Add logging to python script

Regards,
Daniel Folch

[DFolchA]

Hello team,

I have added logging and error handling to the python script.

Regards,
Daniel Folch