Search multiple data streams and indices - Permissions

Elastic Stack Elasticsearch
1

Hello,

I am trying to perform some searches over multiple data streams and indices using a -* pattern. Everything seems to be working when I search over a specific index, but if a tried the wildcard my client prompts an error.

This works:
search = es.get(index='customIndex-12022', id=id, ignore=404)

This give the following error:
search = es.get(index='customIndex-*', id=id, ignore=404)

AuthorizationException(403, 'security_exception', 'action [indices:data/read/get] is unauthorized for user [custom_beats] with roles [custom-beats,ingest_admin], this action is granted by the index privileges [read,all]')

Thanks in advance :wink:

2

What permissions does that user have?

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.