I am using logstash to manage my templates using the elasticsearch output and
manage_template. I have given the following role to the logstash user (see screenshot)
This is elasticsearch 5.1.1 hosted on elastic.co
You can see
manage_index_templates is enabled. If I then add
superuser permission to the user it creates the template fine, but I don't want to grant logstash all of those permissions. I thought
manage_index_templates would be enough. Any ideas?