From fe6783b3cb045a78e6e40600b2842a015a977f9c Mon Sep 17 00:00:00 2001 From: Aaron Mildenstein Date: Fri, 2 Aug 2019 14:34:26 -0700 Subject: [PATCH] Add missing "create" privilege to documentation Users following our documentation are frustrated to discover that they get 403 errors from Logstash, even when following the instructions to the letter. The problem is that the `create` privilege is missing. With this in place, it works as designed. These changes may need to be back ported to previous branches, too. Fixes #11013 --- docs/static/security/logstash.asciidoc | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/docs/static/security/logstash.asciidoc b/docs/static/security/logstash.asciidoc index 3a95fc426..42c499196 100644 --- a/docs/static/security/logstash.asciidoc +++ b/docs/static/security/logstash.asciidoc @@ -37,7 +37,7 @@ To set up authentication credentials for Logstash: . Use the the **Management > Roles** UI in {kib} or the `role` API to create a `logstash_writer` role. For *cluster* privileges, add `manage_index_templates` and `monitor`. -For *indices* privileges, add `write`, `delete`, and `create_index`. +For *indices* privileges, add `write`, `create`, `delete`, and `create_index`. + If you plan to use {ref}/getting-started-index-lifecycle-management.html[index lifecycle management], also add `manage_ilm` for cluster and `manage` and `manage_ilm` for indices. @@ -50,7 +50,7 @@ POST _xpack/security/role/logstash_writer "indices": [ { "names": [ "logstash-*" ], <2> - "privileges": ["write","delete","create_index","manage","manage_ilm"] <3> + "privileges": ["write","create","delete","create_index","manage","manage_ilm"] <3> } ] }