# Permissions of logstash\_write user

**URL:** <https://discuss.elastic.co/t/permissions-of-logstash-write-user/194812>\
**Category:** Elasticsearch\
**Created:** [August 12, 2019, 8:21am UTC](https://discuss.elastic.co/t/permissions-of-logstash-write-user/194812 "2019-08-12T08:21:22Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![jimmyvalmer19](https://avatars.discourse-cdn.com/v4/letter/j/dc4da7/32.png) [@jimmyvalmer19](https://discuss.elastic.co/u/jimmyvalmer19)\
**Post date:** [August 12, 2019, 8:21am UTC](https://discuss.elastic.co/t/permissions-of-logstash-write-user/194812/1 "2019-08-12T08:21:22Z")

</div>

Hello.  
I have user called logstash and role called logstash\_write. User logstash has a role logstash\_write and the role is configured as follows:

Cluster privileges: all  
Indices privileges: all (for all indices i create with logstash)  
Kibana privileges: none

Sometimes it happens, that I don't see new messages in Kibana for particular index. Last time it was this error message:

[2019-08-09T13:53:03,155][WARN][o.e.g.MetaStateService] [elasticsearchNode1] [[\<index\_name\>/\<index\_id\>]]: failed to write index state

I can only fix this by using admin credentials for logstash in order to continue writting to index. Which is obviously dirty way. Did someone else have to deal with this?

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [September 9, 2019, 8:21am UTC](https://discuss.elastic.co/t/permissions-of-logstash-write-user/194812/2 "2019-09-09T08:21:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.