Need help with resolving - security_exception - no permissions for [indices:admin/create] and User [name=logstash

Elastic Stack Logstash
1

I just deployed a new ELK instance in K8 platform. i keep getting these errors -

[logstash.outputs.elasticsearch][main] retrying failed action with response code: 403 ({"type"=>"security_exception", "reason"=>"no permissions for [indices:admin/create] and User [name=logstash, backend_roles=[logstash, all_access], requestedTenant=null]"})

Also the filebeat is pointed to this logstash but the data doesnt show up on Kibana -

i get the similar error for any non admin account (the data doesnt show up for admin account either)

security_exception",
"reason" : "no permissions for [indices:data/read/search] and User [name=, backend_roles=, requestedTenant=user]"

2

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.