When asking questions, please provide the following information:
- Search Guard and Elasticsearch version 6.3.2-23.2
hi
after installing searchguard. i am not able to creted new indices in elasticsearch using logstash.
even when i list indices it only shows the indices which were created before installing searchguard plugin on elasticsearch
it gives this error
bash-4.4# curl -XGET “http://elasticsearch:9200/_cat/indices?pretty” -u logstash -p
Enter host password for user ‘logstash’:
{
“error” : {
“root_cause” : [
{
“type” : “security_exception”,
“reason” : “no permissions for [indices:monitor/stats] and User [name=logstash, roles=[logstash], requestedTenant=null]”
}
],
“type” : “security_exception”,
“reason” : “no permissions for [indices:monitor/stats] and User [name=logstash, roles=[logstash], requestedTenant=null]”
},
“status” : 403
}
my logstash.conf file looks like-
output {
if [namespace] != “kube-system” {
elasticsearch {
hosts => [“http://elasticsearch:9200/”]
index => “logstash-%{+YYYY.MM.dd}”
user => logstash
password => logstash
}
}
}