elastic / elastic/integrations

[Elasticsearch]: Specify permission requirements for monitoring data

Open
#17,789 1 comment 0 reactions 0 assignees View on GitHub
Integration:elasticsearch needs:triage Team:Stack Monitoring
Dominant language
Handlebars
Stars
333
Forks
647
Avg merge
3d 4h
Merged PRs (30d)
209

Description

### Integration Name

Elasticsearch [elasticsearch]

### Dataset Name

_No response_

### Integration Version

1.20

### Agent Version

8.19

### OS Version and Architecture

RHEL8

### User Goal

It would be great to specify what the minimum permissions needed for the integration are. This supports a least-privilege approach for folks who are picky about RBAC.

### Existing Features

N/A

### What did you see?

We tested with the built-in `remote_monitoring_collector` role and found that some of the metadata like `elasticsearch.index.creation_date` was not being pulled. We worked around it by giving the user the `superuser` role temporarily, pending feedback from this issue.

### Anything else?

Specifically, we were running into issues with the pivot transform for metrics that populates the Data Streams Usage dashboard not collecting anything due to the above issue. Having specific permissions will allow customers to easily configure the integration and reduce the reliance on `superuser`.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.