# Can we update node roles of elastic using API

**URL:** <https://discuss.elastic.co/t/can-we-update-node-roles-of-elastic-using-api/337469>\
**Category:** Elasticsearch\
**Created:** [July 3, 2023, 1:55pm UTC](https://discuss.elastic.co/t/can-we-update-node-roles-of-elastic-using-api/337469 "2023-07-03T13:55:54Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Nishant\_Chauhan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nishant_chauhan/32/122587_2.png) [@Nishant\_Chauhan](https://discuss.elastic.co/u/Nishant_Chauhan)\
**Post date:** [July 3, 2023, 1:55pm UTC](https://discuss.elastic.co/t/can-we-update-node-roles-of-elastic-using-api/337469/1 "2023-07-03T13:55:55Z")

</div>

I do not have access to elasticsearch.yaml , can i update node roles of elastic using any API.

version - 7.17

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [July 3, 2023, 1:57pm UTC](https://discuss.elastic.co/t/can-we-update-node-roles-of-elastic-using-api/337469/2 "2023-07-03T13:57:18Z")

</div>

> [@Nishant\_Chauhan](#):
>
> I do not have access to elasticsearch.yaml , can i update node roles of elastic using any API.

No, not possible, node roles are defined in `elasticsearch.yml` and any change requires a restart of the node.

---

<div class="post-metadata">

**Author:** ![Nishant\_Chauhan](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/nishant_chauhan/32/122587_2.png) [@Nishant\_Chauhan](https://discuss.elastic.co/u/Nishant_Chauhan)\
**Post date:** [July 3, 2023, 2:16pm UTC](https://discuss.elastic.co/t/can-we-update-node-roles-of-elastic-using-api/337469/3 "2023-07-03T14:16:20Z")

</div>

I am working on setting up SIEM, where I am getting logs in kibana.log saying.

so transform role is mandatory to setup SIEM is it correct?

```auto
{"type":"log","@timestamp":"2023-06-28T09:28:32-04:00","tags":["error","plugins","fleet"],"pid":16268,"message":"Error: Error installing endpoint 1.3.0: status_exception: [status_exception] Reason: Transform requires the transform node role for at least 1 node, found no transform nodes\n at ensureInstalledPackage (/usr/share/kibana/x-pack/plugins/fleet/server/services/epm/packages/install.js:191:11)\n at runMicrotasks (<anonymous>)\n at processTicksAndRejections (node:internal/process/task_queues:96:5)\n at async Promise.all (index 0)\n at PackagePolicyService.create (/usr/share/kibana/x-pack/plugins/fleet/server/services/package_policy.js:145:33)\n at createPackagePolicyHandler (/usr/share/kibana/x-pack/plugins/fleet/server/routes/package_policy/handlers.js:105:27)\n at Router.handle (/usr/share/kibana/src/core/server/http/router/router.js:163:30)\n at handler (/usr/share/kibana/src/core/server/http/router/router.js:124:50)\n at exports.Manager.execute (/usr/share/kibana/node_modules/@hapi/hapi/lib/toolkit.js:60:28)\n at Object.internals.handler (/usr/share/kibana/node_modules/@hapi/hapi/lib/handler.js:46:20)\n at exports.execute (/usr/share/kibana/node_modules/@hapi/hapi/lib/handler.js:31:20)\n at Request._lifecycle (/usr/share/kibana/node_modules/@hapi/hapi/lib/request.js:371:32)\n at Request._execute (/usr/share/kibana/node_modules/@hapi/hapi/lib/request.js:281:9)"}`

```

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [July 3, 2023, 3:33pm UTC](https://discuss.elastic.co/t/can-we-update-node-roles-of-elastic-using-api/337469/4 "2023-07-03T15:33:50Z")

</div>

> [@Nishant\_Chauhan](#):
>
> so transform role is mandatory to setup SIEM is it correct?

It is not mandatory, your cluster will work without a Transform node, but some features will not work right.

I would recommend that you enable the transform role on one of your nodes.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 31, 2023, 3:34pm UTC](https://discuss.elastic.co/t/can-we-update-node-roles-of-elastic-using-api/337469/5 "2023-07-31T15:34:11Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
