# Permission configuration for Logstash

**URL:** <https://forum.search-guard.com/t/permission-configuration-for-logstash/279>\
**Category:** Search Guard\
**Created:** [September 20, 2016, 3:57pm UTC](https://forum.search-guard.com/t/permission-configuration-for-logstash/279 "2016-09-20T15:57:35Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![Cyrille](https://avatars.discourse-cdn.com/v4/letter/c/4491bb/32.png) [@Cyrille](https://forum.search-guard.com/u/Cyrille)\
**Post date:** [September 20, 2016, 3:57pm UTC](https://forum.search-guard.com/t/permission-configuration-for-logstash/279/1 "2016-09-20T15:57:35Z")

</div>

Hi,

I’m trying to configure SG to allow Logstash to load data to some indices in my cluster.  
It seems that my configuration is not working correctly, I’m receiving the following error :  
“no permissions for indices:data/write/bulk”

My configuration :

- ES 2.3.3

- search-guard-2-2.3.3.6

- search-guard-ssl-2.3.3.16

- logstash configuration :  
hosts =\> [“[http://server1:9203](http://server1:9203)”,“[http://server2:9203](http://server2:9203)”]  
index =\> “%{[@metadata][indexname]}”  
document\_id =\> “%{[@metadata][generated\_id]}”  
document\_type =\> “%{type}”  
manage\_template =\> “false”  
user =\> “my\_account”  
password =\> “my\_password”  
%{[@metadata][indexname]} could be indice1-yy-mm, indice2-yy-mm,indice3-yy-mm

- role :  
sg\_logstash:  
indices:  
‘indice1-_':  
'_’:  
- CRUD  
- CREATE\_INDEX  
‘indice2-_':  
'_’:  
- CRUD  
- CREATE\_INDEX  
‘indice3-_':  
'_’:  
- CRUD  
- CREATE\_INDEX

Thanks for your help

---

<div class="post-metadata">

**Author:** ![Cyrille](https://avatars.discourse-cdn.com/v4/letter/c/4491bb/32.png) [@Cyrille](https://forum.search-guard.com/u/Cyrille)\
**Post date:** [September 20, 2016, 3:59pm UTC](https://forum.search-guard.com/t/permission-configuration-for-logstash/279/2 "2016-09-20T15:59:58Z")

</div>

I forgot 1 information : it works with the following permission :  
sg\_logstash:  
indices:  
‘_':  
'_’:  
- CRUD  
- CREATE\_INDEX