Roles needed to write Logstash events

Elastic Stack Elasticsearch
1

Hi there!

I am setting up Logstash to write events in Elasticsearch, and am configuring some security as well, e.g. I intend to use basic user/password authentication. In that sense, I have already created a role called logstash_write as indicated in the documentation, and have also created a user for Logstash and mapped that role to such user.

Everything is working fine. My question is: do I have to create the logstash_reader role as well, and assign it to my Logstash user? Don't know if at some point Logstash needs to read something from the indices it creates.

Thanks in advance.

2

that depends if you have set up an elasticsearch input or a filter.

3

I see. For now, I only have an elasticsearch output section in my .conf file.

Thanks.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.