After securing Filebeat, make sure your users have the roles (or associated privileges) required to use these Filebeat features. Note that some of the roles shown here are built-in, and some are user-defined.
Send data to a secured cluster
Run Filebeat modules
Load index templates
Load Filebeat dashboards into Kibana
Load machine learning jobs
Read indices created by Filebeat
View Filebeat dashboards in Kibana
Store and manage configurations in a central location in Kibana
Load index lifecycle policies and use index lifecycle management
[a] These roles are user-defined.
To create the user-defined roles shown here, see Configure authentication credentials and Grant users access to Filebeat indices. You may want to define additional roles to provide more restrictive access.