What user role do I need need for shipping logs from fluentd to elastic search

Welcome to our community! :smiley:

We aren't super familiar with fluentd/bit, but I would suggest starting with the Filebeat roles and users and see if they work.