---
- name: Check if filebeat is installed
  ansible.builtin.command: dpkg -s filebeat
  register: filebeat_check
  changed_when: false
  failed_when: false

- name: Install filebeat
  ansible.builtin.apt:
    # yamllint disable-line rule:line-length
    deb: ""
  when: filebeat_check.rc != 0

- name: Make backups
  ansible.builtin.copy:
    src: "/etc/filebeat/{{ item }}"
    dest: "/etc/filebeat/{{ item | basename }}.bak"
    remote_src: true
  with_items:
    - filebeat.yml
    - fields.yml
  ignore_errors: "{{ ansible_check_mode }}"

- name: Add new filebeat conf
  ansible.builtin.template:
    src: templates/filebeat.yml.j2
    dest: /etc/filebeat/filebeat.yml
    owner: root
    group: root
    mode: '0644'

- name: Add new fields conf
  ansible.builtin.template:
    src: files/fields.yml
    dest: /etc/filebeat/fields.yml
    owner: root
    group: root
    mode: '0644'

- name: Enable filebeat
  ansible.builtin.service:
    name: filebeat
    state: restarted
    enabled: true
  ignore_errors: "{{ ansible_check_mode }}"
...