logstash role

Create a role for a user that will allow logstash to write to the logstash-* indexes.

POST /_security/role/logstash_writer
{
  "cluster": ["manage_index_templates", "monitor", "manage_ilm"],
  "indices": [
    {
      "names": [ "logstash-*" ],
      "privileges": ["write","delete","create_index","manage","manage_ilm"]
    }
  ]
}