Article Number
000002061
Applies To
NetWitness Product Set: NetWitness Platform
NetWitness Product/Service Type: New Health and Wellness, Kibana
NetWitness Version/Condition: 11.x, 12.x
Platform: CentOS 7 / Alma
Issue
In the NetWitness Health and Wellness Kibana application, internal user roles and functions are not documented.
Task
This document outlines each user Role and Functionality in the Netwitness New Health and Wellness Kibana Application.
Resolution
The following are the internal user roles and functionalities:
| Internal User Type | Functionality | Roles |
| logstash | The ‘Logstash’ system sends system level data such as monitoring to Elastic search. This user grants permissions for ‘Logstash’ to interact with the cluster, cluster-wide searches, cluster monitoring, and write to the various ‘Logstash’ indices.
| "logstash" |
snapshotrestore
| This system user creates snapshots of all the indices. | “snapshotrestore”
|
| admin | This is an out of the box user by RSA NetWitness.
| "admin"
|
| kibanaserver | This is a Kibana server user.
| “kibanaserver” |
| nwservice | This is a NetWitness service user.
| “nwservice” |
| kibanaro | This is a kibanaro user.
| "kibanauser" and "readall" |
| readall | This is a readall user who grants permissions for cluster-wide searches like msearch and search permissions for all indices.
| "readall" |
