Hi jaymode,
The user looks like he has the correct role assigned to me, unless I'm mistaken:
esusers list ls_user
ls_user : logstash
And yeah I do have some logstash indices created.
[root@logs:~] #curl --user admin:$ES_PASS -XGET http://localhost:9200/_cat/indices
green open logstash-2015.11.19 5 1 7011724 0 6.4gb 3.2gb
green open .kibana 1 1 2 0 10.5kb 5.2kb
green open logstash-2015.11.17 5 1 20507975 0 17.9gb 8.9gb
green open logstash-2015.11.18 5 1 26372939 0 23.9gb 11.9gb
It seems that Logstash is functioning normally more or less. The problem is still that i can't get the ls_user to auth to elasticsearch from the LS config. Although as I demonstrated earlier he can auth to the ES cluster on the command line:
[root@logs:~] #curl --user ls_user:$ES_PASS localhost:9200
{
"name" : "JF_ES1",
"cluster_name" : "elasticsearch",
"version" : {
"number" : "2.0.0",
"build_hash" : "de54438d6af8f9340d50c5c786151783ce7d6be5",
"build_timestamp" : "2015-10-22T08:09:48Z",
"build_snapshot" : false,
"lucene_version" : "5.2.1"
},
"tagline" : "You Know, for Search"
}
I'm still seeing this output when I restart LS with the user login info:
plugin:elasticsearch Authentication Exception
Still open to suggestions!