After securing Journalbeat, make sure your users have the roles (or associated privileges) required to use these Journalbeat features. Note that some of the roles shown here are built-in, and some are user-defined.
Send data to a secured cluster
Load index templates
Read indices created by Journalbeat
Load index lifecycle policies and use index lifecycle management
[a] These roles are user-defined.
To create the user-defined roles shown here, see Configure authentication credentials and Grant users access to Journalbeat indices. You may want to define additional roles to provide more restrictive access.