Issues with index parameter

[katmlee]

Hello, we are having an issue with accessing an index for a new user we generated. After generating the user, we are trying to give the user permissions with "curl -u root:rootpassword ’http://port/_httpuserauth?mode=updateindex&username=someuser&index=/_search* ".

However, we are getting a 403 forbidden message when we hit the api url ending in /api/elastic/_search?size=6.

However, if we use index=/_* it works fine. So either the regex is not working well for us or we don't know what to pass into the index. Any advice as to what we should be passing to index to make the permissions work?

Is there a way to print out the indices to see what exists?

Thank you!

[lmangani]

Hi @katmlee
Could you try using .* as suffix for regex match in your rule?