Flow-collector output to opensearch, what is the specific role for openseach user?

[fred]

Hi all,
I’m using a flow collector to capture NetFlow data and send it to OpenSearch. I’ve created a specific user in OpenSearch and assigned cluster-level permissions (such as indices:admin/index_template/put and others). I then tried granting index-level permissions for elastiflow*, but it seems insufficient.

Where can I find documentation on configuring such a user, or does anyone know the exact permissions required to make this work?

Thanks in advance!

[dxturner]

These are the backend roles I’ve given my test internal user in the lab:

[fred]

Thanks, I was looking for roles, but maybe it’s better to use internal users instead.Have a nice day!!