Doc: Clarify minimum privileges for logstash_writer role (#12613) (#12623)

Backports: #12613
Fixes: #12612
This commit is contained in:
Karen Metts 2021-01-29 15:14:49 -05:00 committed by GitHub
parent d0f1ed4c71
commit 0cddeefd99
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23

View file

@ -37,10 +37,11 @@ To set up authentication credentials for Logstash:
. Use the the **Management > Roles** UI in {kib} or the `role` API to create a . Use the the **Management > Roles** UI in {kib} or the `role` API to create a
`logstash_writer` role. For *cluster* privileges, add `manage_index_templates` and `monitor`. `logstash_writer` role. For *cluster* privileges, add `manage_index_templates` and `monitor`.
For *indices* privileges, add `write`, `create`, `delete`, and `create_index`. For *indices* privileges, add `write`, `create`, and `create_index`.
+ +
If you plan to use {ref}/getting-started-index-lifecycle-management.html[index lifecycle Add `manage_ilm` for cluster and `manage` and `manage_ilm` for indices if you
management], also add `manage_ilm` for cluster and `manage` and `manage_ilm` for indices. plan to use {ref}/getting-started-index-lifecycle-management.html[index
lifecycle management].
+ +
[source, sh] [source, sh]
--------------------------------------------------------------- ---------------------------------------------------------------
@ -50,7 +51,7 @@ POST _xpack/security/role/logstash_writer
"indices": [ "indices": [
{ {
"names": [ "logstash-*" ], <2> "names": [ "logstash-*" ], <2>
"privileges": ["write","create","delete","create_index","manage","manage_ilm"] <3> "privileges": ["write","create","create_index","manage","manage_ilm"] <3>
} }
] ]
} }