# Helm logstash elasticSearch plugin does not work with custom user except if supersuer

**URL:** <https://discuss.elastic.co/t/helm-logstash-elasticsearch-plugin-does-not-work-with-custom-user-except-if-supersuer/303520>\
**Category:** Logstash\
**Created:** [April 28, 2022, 1:35pm UTC](https://discuss.elastic.co/t/helm-logstash-elasticsearch-plugin-does-not-work-with-custom-user-except-if-supersuer/303520 "2022-04-28T13:35:11Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![stoza](https://avatars.discourse-cdn.com/v4/letter/s/e9a140/32.png) [@stoza](https://discuss.elastic.co/u/stoza)\
**Post date:** [April 28, 2022, 1:35pm UTC](https://discuss.elastic.co/t/helm-logstash-elasticsearch-plugin-does-not-work-with-custom-user-except-if-supersuer/303520/1 "2022-04-28T13:35:11Z")

</div>

Hi,

I'm testing the to install logstash with helm from [https://github.com/elastic/helm-charts](https://github.com/elastic/helm-charts).

Everything works fine except that logstash is not able to query index and get a 403 forbidden when another user than elastic or superuser is used in the elastic plugin user field.

The exact same configuration with only read privilege for the user and this is working fine.

So this seems to be only related to logstash running with helm but this is obviously not ideal from a security point of view to give a lot of privilege to only fetch logs.

Does anybody already encounter that and have an idea how to fix?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [May 26, 2022, 1:35pm UTC](https://discuss.elastic.co/t/helm-logstash-elasticsearch-plugin-does-not-work-with-custom-user-except-if-supersuer/303520/2 "2022-05-26T13:35:16Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.