X-Pack watcher permissions

Elastic Stack Elasticsearch
1

Hello,
I wanted to understand how the watcher permissions is working .

for example i am a user with permission to index x but i don't have a permission to index y .

currently i have permission watcher/admin ,
does this mean i can write a watcher for index y ?

if yes it look like a by pass because i can send results to my email by this watcher .

Thanks

2

By that you mean you have a role that gives you manage_watcher privilege ?

If you create the watch, the watch will run with your user privileges, so it will only be able read index x.

Hope this clarifies things for you

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.