Hi there,
since upgrading to v8.1 Filebeat no longer starts with the following error:
Connection marked as failed because the onConnect callback failed: error loading template: failure while checking if template exists: 405 Method Not Allowed
Currently, the flebeat_writer user is supposed to have the following roles:
filebeat_writer:
cluster:
- manage_ilm
- manage_index_templates
- manage_ingest_pipelines
- monitor
- read_ilm
- read_pipeline
indices:
- names:
- filebeat
- filebeat-*
privileges:
- create_index
- manage
- write
Which roles are missing?