This functionality is in beta and is subject to change. The design and code is less mature than official GA features and is being provided as-is with no warranties. Beta features are not subject to the support SLA of official GA features.
« Configure Functionbeat to use X-Pack security Configure authentication credentials »
Elastic Docs ›Functionbeat Reference [6.6] ›Securing Functionbeat ›Configure Functionbeat to use X-Pack security

Functionbeat features that require authorization

edit

Functionbeat features that require authorization

edit

After securing Functionbeat, make sure your users have the roles (or associated privileges) required to use these Functionbeat features. Note that some of the roles shown here are built-in, and some are user-defined.

Feature Role

Send data to a secured cluster

functionbeat_writer [1]

Load index templates

functionbeat_writer [1] and kibana_user

Load machine learning jobs

machine_learning_admin

Read indices created by Functionbeat

functionbeat_reader [1]

Load index lifecycle policies and use index lifecycle management

functionbeat_ilm [1]

To create the user-defined roles shown here, see Configure authentication credentials and Grant users access to Functionbeat indices. You may want to define additional roles to provide more restrictive access.

[1] These roles are user-defined.
« Configure Functionbeat to use X-Pack security Configure authentication credentials »