IMPORTANT: No additional bug fixes or documentation updates will be released for this version. For the latest information, see the current release documentation.
« Configure Packetbeat to use X-Pack security Configure authentication credentials »
Elastic Docs ›Packetbeat Reference [6.6] ›Securing Packetbeat ›Configure Packetbeat to use X-Pack security

Packetbeat features that require authorization

edit

Packetbeat features that require authorization

edit

After securing Packetbeat, make sure your users have the roles (or associated privileges) required to use these Packetbeat features. Note that some of the roles shown here are built-in, and some are user-defined.

Feature Role

Send data to a secured cluster

packetbeat_writer [1]

Load index templates

packetbeat_writer [1] and kibana_user

Load Packetbeat dashboards into Kibana

packetbeat_writer [1] and kibana_user

Load machine learning jobs

machine_learning_admin

Read indices created by Packetbeat

packetbeat_reader [1]

View Packetbeat dashboards in Kibana

kibana_user

Load index lifecycle policies and use index lifecycle management

packetbeat_ilm [1]

To create the user-defined roles shown here, see Configure authentication credentials and Grant users access to Packetbeat indices. You may want to define additional roles to provide more restrictive access.

[1] These roles are user-defined.
« Configure Packetbeat to use X-Pack security Configure authentication credentials »