mirror of
https://github.com/Security-Onion-Solutions/securityonion.git
synced 2025-12-24 18:03:10 +01:00
65 lines
1.4 KiB
JSON
65 lines
1.4 KiB
JSON
{
|
|
"cluster": [
|
|
"cancel_task",
|
|
"create_snapshot",
|
|
"monitor",
|
|
"monitor_data_frame_transforms",
|
|
"monitor_ml",
|
|
"monitor_rollup",
|
|
"monitor_snapshot",
|
|
"monitor_text_structure",
|
|
"monitor_transform",
|
|
"monitor_watcher",
|
|
"read_ccr",
|
|
"read_ilm",
|
|
"read_pipeline",
|
|
"read_slm"
|
|
],
|
|
"indices": [
|
|
{
|
|
"names": [
|
|
"logs-*",
|
|
"so-*"
|
|
],
|
|
"privileges": [
|
|
"index",
|
|
"maintenance",
|
|
"monitor",
|
|
"read",
|
|
"read_cross_cluster",
|
|
"view_index_metadata"
|
|
]
|
|
}
|
|
],
|
|
"applications": [
|
|
{
|
|
"application": "kibana-.kibana",
|
|
"privileges": [
|
|
"feature_discover.all",
|
|
"feature_dashboard.all",
|
|
"feature_canvas.all",
|
|
"feature_maps.all",
|
|
"feature_ml.all",
|
|
"feature_logs.read",
|
|
"feature_visualize.all",
|
|
"feature_infrastructure.read",
|
|
"feature_apm.read",
|
|
"feature_uptime.read",
|
|
"feature_siem.read",
|
|
"feature_dev_tools.read",
|
|
"feature_advancedSettings.read",
|
|
"feature_indexPatterns.read",
|
|
"feature_savedObjectsManagement.read",
|
|
"feature_savedObjectsTagging.read",
|
|
"feature_fleet.all",
|
|
"feature_actions.read",
|
|
"feature_stackAlerts.read"
|
|
],
|
|
"resources": [
|
|
"*"
|
|
]
|
|
}
|
|
],
|
|
"run_as": []
|
|
}
|