elastic / elastic/integrations
[Elasticsearch]: Specify permission requirements for monitoring data
- Dominant language
- Handlebars
- Stars
- 333
- Forks
- 647
- Avg merge
- 3d 4h
- Merged PRs (30d)
- 209
Description
### Integration Name
Elasticsearch [elasticsearch]
### Dataset Name
_No response_
### Integration Version
1.20
### Agent Version
8.19
### OS Version and Architecture
RHEL8
### User Goal
It would be great to specify what the minimum permissions needed for the integration are. This supports a least-privilege approach for folks who are picky about RBAC.
### Existing Features
N/A
### What did you see?
We tested with the built-in `remote_monitoring_collector` role and found that some of the metadata like `elasticsearch.index.creation_date` was not being pulled. We worked around it by giving the user the `superuser` role temporarily, pending feedback from this issue.
### Anything else?
Specifically, we were running into issues with the pivot transform for metrics that populates the Data Streams Usage dashboard not collecting anything due to the above issue. Having specific permissions will allow customers to easily configure the integration and reduce the reliance on `superuser`.
Contributor guide
Assessment
This issue has not been assessed yet.