# \[kafka.output\] Do I need to give filebeat DESCRIBE access to \_\_consumer\_offsets

**URL:** <https://discuss.elastic.co/t/kafka-output-do-i-need-to-give-filebeat-describe-access-to-consumer-offsets/124554>\
**Category:** Beats\
**Tags:** filebeat\
**Created:** [March 19, 2018, 12:17pm UTC](https://discuss.elastic.co/t/kafka-output-do-i-need-to-give-filebeat-describe-access-to-consumer-offsets/124554 "2018-03-19T12:17:19Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![JohanRask](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/johanrask/32/22713_2.png) [@JohanRask](https://discuss.elastic.co/u/JohanRask)\
**Post date:** [March 19, 2018, 12:17pm UTC](https://discuss.elastic.co/t/kafka-output-do-i-need-to-give-filebeat-describe-access-to-consumer-offsets/124554/1 "2018-03-19T12:17:19Z")

</div>

Hi, we are securing our kafka cluster but are seeing this in logs like every 10 minutes.

`[2018-03-19 11:16:32,622] INFO Principal = User:ANONYMOUS is Denied Operation = Describe from host = 10.133.225.9 on resource = Topic:__consumer_offsets (kafka.authorizer.logger)`

I have tracked this down this to filebeat so my question is if DESCRIBE access to this topic is required? Everything seems to be working properly but I want to make sure.

Regards /Johan

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 16, 2018, 12:17pm UTC](https://discuss.elastic.co/t/kafka-output-do-i-need-to-give-filebeat-describe-access-to-consumer-offsets/124554/2 "2018-04-16T12:17:31Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.