I created a “Read” user account in graylog web interface.
When I used "curl -u User:Password -X GET 'http://ipaddr:9000/api/… " which showed {message: not authorized} .
Since we need to limit that user account, any suggestion for us?
Please elaborate on what exactly you did, e. g. which commands you’ve executed, which permissions the user account has, and what you’d expect as a response to your HTTP requests.