Merge pull request #10078 from Security-Onion-Solutions/2.4/fix-elasticsearch-roles

FIX: SOC only displaying data for users assigned the superuser role #10068
2025-12-09 10:42:54 +01:00 · 2023-03-31 09:26:58 -04:00
parent a8038c90ce a8b6470a14
commit 5b2e39f80d
4 changed files with 8 additions and 4 deletions
--- a/salt/elasticsearch/roles/analyst.json
+++ b/salt/elasticsearch/roles/analyst.json
@@ -18,6 +18,7 @@
  "indices": [
    {
      "names": [
+        "logs-*",
        "so-*"
      ],
      "privileges": [
--- a/salt/elasticsearch/roles/auditor.json
+++ b/salt/elasticsearch/roles/auditor.json
@@ -16,6 +16,7 @@
  "indices": [
    {
      "names": [
+        "logs-*",
        "so-*"
      ],
      "privileges": [
--- a/salt/elasticsearch/roles/limited-analyst.json
+++ b/salt/elasticsearch/roles/limited-analyst.json
@@ -4,6 +4,7 @@
  "indices": [
    {
      "names": [
+        "logs-*",
        "so-*"
      ],
      "privileges": [
--- a/salt/elasticsearch/roles/limited-auditor.json
+++ b/salt/elasticsearch/roles/limited-auditor.json
@@ -4,6 +4,7 @@
  "indices": [
    {
      "names": [
+        "logs-*",
        "so-*"
      ],
      "privileges": [