Control deletion of log index while running a curator

Elastic Stack Kibana
1

We are in a situation where we are running a curator to purge logs on a certain interval. At the same time as part of compliance process we need to disable deletion or any indexes by any user by curl delete.

How do we control the deletion of indexes by any users?

2

Hey @Syed_Irfan,

You can control who has delete access to specific indices (or patterns of indices) by configuring index privileges on your user roles. It sounds like you want to make sure that users don't have the delete index privilege.

If they need delete access until this curation stage, then you may have to rename these indices so that they match a pattern that you deny delete on.

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.