Give indices:admin/template/put permission to user datanode

Graylog Central (peer support)
6

Well, that was much much much easier than I initially thought.
Really thanks Tomas Dvorak.

openssl x509 -in cert_mycert.crt -noout -subject
subject=CN = datanode

cat /etc/graylog/datanode/overrideconfig.conf
plugins.security.authcz.admin_dn = CN = datanode

cat /etc/graylog/datanode/datanode.conf | grep overri
opensearch_configuration_overrides_file = /etc/graylog/datanode/overrideconfig.conf

Then, restarted graylog-datanode and the CURL PUT command worked.
I’ll be doing some tests now.

 curl -X PUT --key mykey.crt --cert mycert.crt --cacert myca.crt https://rpi5.home.arpa:9200/_template/graylog_template -H 'Content-Type: application/json' -d '{
  "index_patterns": ["ipfix_*"],
  "settings": {
    "index.translog.flush_threshold_size": "2gb",
    "index.merge.scheduler.max_thread_count": 1,
    "index.translog.durability": "async",
    "index.translog.sync_interval": "10s",
    "index.refresh_interval": "30s",
    "index.merge.policy.max_merge_at_once": 5
  }
}'
{"acknowledged":true}
1 Like