Least-Privilege To View All Server Asset Sending Logs

Elastic Security SIEM
1

I was recently granted access into ELK but I cannot see any of the servers/assets that I was told were added & sending logs. What is the minimal RBAC I would need to see the servers & view what kind of volume they are sending?

Need to use this for more servers & want to do a best-guess on #GB/TB that'll be sent...

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.