NOTE: You are looking at documentation for an older release. For the latest information, see the current release documentation.

Elastic Docs ›Filebeat Reference [6.8] ›Securing Filebeat ›Configure Filebeat to use X-Pack security
« Configure Filebeat to use X-Pack security Configure authentication credentials »

Filebeat features that require authorizationedit

After securing Filebeat, make sure your users have the roles (or associated privileges) required to use these Filebeat features. Note that some of the roles shown here are built-in, and some are user-defined.

Feature Role

Send data to a secured cluster

filebeat_writer [1]

Run Filebeat modules

filebeat_writer [1]

Load index templates

filebeat_writer [1] and kibana_user

Load Filebeat dashboards into Kibana

filebeat_writer [1] and kibana_user

Load machine learning jobs

machine_learning_admin

Read indices created by Filebeat

filebeat_reader [1]

View Filebeat dashboards in Kibana

kibana_user

Store and manage configurations in a central location in Kibana

beats_admin

Load index lifecycle policies and use index lifecycle management

filebeat_ilm [1]

To create the user-defined roles shown here, see Configure authentication credentials and Grant users access to Filebeat indices. You may want to define additional roles to provide more restrictive access.

[1] These roles are user-defined.
« Configure Filebeat to use X-Pack security Configure authentication credentials »