Hi, I am about to install shield on my cluster and when I want to configure logstash to communicate with ES i have the following problem : I followed the documentation and when i did this configuration the authentication didn't work: elasticsearch { ... user => "myuser" password => "mypasswo…

SOLVED: Logstash issue with shield - "action [indices:data/write/bulk] is unauthorized for user [logstash]"

jaymode (Jay Modi) April 27, 2016, 12:23pm 8

So there are no access denied entries and you still see that exception regarding write not being allowed for your logstash user?

Topic		Replies	Views
Elastic search + Shield instance is not authenticating logstash user Elasticsearch elastic-stack-security	9	3593	July 6, 2017
Security Exception with data/write/bulk Logstash	7	6372	January 20, 2017
Action [indices:data/write/bulk] is unauthorized for user [logstash_system]\ Logstash	1	2475	August 30, 2017
Shield AD user is unauthorized only from a different subnet Elasticsearch elastic-stack-security	23	3643	July 6, 2017
LS can't connect to ES with Shield Logstash elastic-stack-security	13	2900	July 6, 2017