Which user role to be selected for User name which will be configured in Winlogbeat configuration?

Elastic Stack Beats
1

Hi Folks,

After trying for a few days, I am able to set up the Elastic server with Kibana in the cluster.

To Deploy Beats (Winlogbeat) on desktops to send logs to Elastic or Logstash, Which user role to be selected for a User name which will be configured in Winlogbeat configuration?

Please help.

Thanks,
Prakash

2

Hi Prakash,
Please have a look at this guide: https://www.elastic.co/guide/en/beats/winlogbeat/current/feature-roles.html
Especially at this chapters:
Setup-Role
https://www.elastic.co/guide/en/beats/winlogbeat/current/feature-roles.html#privileges-to-setup-beats

and Writer-Role
https://www.elastic.co/guide/en/beats/winlogbeat/current/feature-roles.html#privileges-to-publish-events

Hope it will help you.

Regards,
Simon

1 Like
3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.