From dd3a38dc591c253e1b62f53ec0b521e576165204 Mon Sep 17 00:00:00 2001 From: "Nik Mohamad Aizuddin b. Nik Azmi" Date: Thu, 18 Mar 2021 02:22:32 +0800 Subject: [PATCH] docs(README): Add `winlogbeat-*` index --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index 0cfc11e..cf2bff1 100644 --- a/README.md +++ b/README.md @@ -80,7 +80,7 @@ Create a Kibana admin. Go to `Stack Management` > `Security` > `Users` and for e To create a Kibana read-only user, a custom read-only role named `user` must be created first. Go to `Stack Management` > `Security` > `Role` and `Create role` with the following information: * Role name: `user` * Index privileges: - * Indices: `filebeat-*`, Privileges: `read` + * Indices: `filebeat-*`, `winlogbeat-*`, Privileges: `read` * Add Kibana privileges: * Spaces: `minimal` * Privileges for all features: `Read` @@ -98,7 +98,7 @@ Go to `Stack Management` > `Security` > `Role` and `Create role` to create a new * `monitor` * `manage_ilm` * Index privileges: - * Indices: `logstash-*`, `filebeat-*`, Privileges: `write`, `create`, `create_index`, `manage`, `manage_ilm`. + * Indices: `logstash-*`, `filebeat-*`, `winlogbeat-*` Privileges: `write`, `create`, `create_index`, `manage`, `manage_ilm`. Create a new user named `logstash_internal` with role `logstash_writer`. Use password `abcde12345`.