Input Access Managment/Extractor Access for non-admin users

Graylog Central (peer support)
1

1. Describe your incident:
Hello everyone,

We are currently in the process of evaluating graylog-open as an LMS for multiple teams. This also means we use non-admin users who are assigned the appropriate roles so that they can manage their own data in the web-ui and shared their respective streams so they can access their data. I have run into a small issue regarding Inputs - some users want to manage their own inputs, e.g., create/manage their extractors, but I cannot seem to share an input or no role besides the “admin” role seems to manage its access.Sadly I didnt find anything about this specific issue in the current Permissions & Roles Documentation.

2. Describe your environment:

  • OS Information:
    Linux 4.18.0-553.51.1.el8_10.x86_64
  • Package Version:
    Graylog 6.3.0-12

3. What steps have you already taken to try and solve the problem?

I did find some old posts on the graylog community forum, which usually leads to creating custom roles via the api (Edit Extractor Permissions - #5 by Wicht)
Since that is quite an old thread I wanted to know if this is still “best practice” or the best way to go about enabling non-admin users to edit inputs/manage their extractors - or if it is even possibile?

2

Hello @Unit19834,

For cases such as this, best practice would be to create a new role via the api so that users beyond just admins can manage inputs however they would be able to manage all inputs.

Try to carry out any parsing of logs within pipeline/rules and avoid using extractors and they are no longer being developed.

3

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.