IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.

« Configure Filebeat to use X-Pack security Configure authentication credentials »

› › ›

Filebeat features that require authorization

edit

Filebeat features that require authorization

edit

After securing Filebeat, make sure your users have the roles (or associated privileges) required to use these Filebeat features. Note that some of the roles shown here are built-in, and some are user-defined.

Feature	Role
Send data to a secured cluster	`filebeat_writer` ^[1]
Run Filebeat modules	`filebeat_writer` ^[1]
Load index templates	`filebeat_writer` ^[1] and `kibana_user`
Load Filebeat dashboards into Kibana	`filebeat_writer` ^[1] and `kibana_user`
Load machine learning jobs	`machine_learning_admin`
Read indices created by Filebeat	`filebeat_reader` ^[1]
View Filebeat dashboards in Kibana	`kibana_user`
Store and manage configurations in a central location in Kibana	`beats_admin`
Load index lifecycle policies and use index lifecycle management	`filebeat_ilm` ^[1]

To create the user-defined roles shown here, see Configure authentication credentials and Grant users access to Filebeat indices. You may want to define additional roles to provide more restrictive access.

^[1] These roles are user-defined.

« Configure Filebeat to use X-Pack security Configure authentication credentials »