I am using logstash to manage my templates using the elasticsearch output and manage_template. I have given the following role to the logstash user (see screenshot)
This is elasticsearch 5.1.1 hosted on elastic.co
You can see manage_index_templates is enabled. If I then add superuser permission to the user it creates the template fine, but I don't want to grant logstash all of those permissions. I thought manage_index_templates would be enough. Any ideas?
Thanks!