since upgrading to v8.1 Filebeat no longer starts with the following error:
Connection marked as failed because the onConnect callback failed: error loading template: failure while checking if template exists: 405 Method Not Allowed
flebeat_writer user is supposed to have the following roles:
filebeat_writer: cluster: - manage_ilm - manage_index_templates - manage_ingest_pipelines - monitor - read_ilm - read_pipeline indices: - names: - filebeat - filebeat-* privileges: - create_index - manage - write
Which roles are missing?