winlogbeat/docs/getting-started.asciidoc: Document minimum permissions required for local user account #37176

kcreddy · 2023-11-22T09:02:43Z

Proposed commit message

Document minimum permissions required to start Winlogbeat service by a local user account which is not a Windows Administrator.

Checklist

My code follows the style guidelines of this project
I have commented my code, particularly in hard-to-understand areas
I have made corresponding changes to the documentation
I have made corresponding change to the default configuration files
I have added tests that prove my fix is effective or that my feature works
I have added an entry in CHANGELOG.next.asciidoc or CHANGELOG-developer.next.asciidoc.

Author's Checklist

Have to check if entry in CHANGELOG.next.asciidoc is needed

Related issues

Closes [Winlogbeat] Document minimum permissions for Windows service user #15773

mergify · 2023-11-22T09:03:25Z

This pull request does not have a backport label.
If this is a bug or security fix, could you label this PR @kcreddy? 🙏.
For such, you'll need to label your PR with:

The upcoming major version of the Elastic Stack
The upcoming minor version of the Elastic Stack (if you're not pushing a breaking change)

To fixup this pull request, you need to add the backport labels for the needed
branches, such as:

backport-v8./d.0 is the label to automatically backport to the 8./d branch. /d is the digit

elasticmachine · 2023-11-22T09:14:59Z

💚 Build Succeeded

Expand to view the summary

Build stats

Duration: 12 min 43 sec

❕ Flaky test report

No test was executed to be analysed.

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

/test : Re-trigger the build.
/package : Generate the packages and run the E2E tests.
/beats-tester : Run the installation tests with beats-tester.
run elasticsearch-ci/docs : Re-trigger the docs validation. (use unformatted text in the comment!)

elasticmachine · 2023-11-22T09:43:20Z

❕ Build Aborted

Expand to view the summary

Build stats

Duration: 6 min 52 sec

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

/test : Re-trigger the build.
/package : Generate the packages and run the E2E tests.
/beats-tester : Run the installation tests with beats-tester.
run elasticsearch-ci/docs : Re-trigger the docs validation. (use unformatted text in the comment!)

elasticmachine · 2023-11-22T09:44:51Z

Pinging @elastic/security-external-integrations (Team:Security-External Integrations)

elasticmachine · 2023-11-22T09:48:08Z

💚 Build Succeeded

Expand to view the summary

Build stats

Duration: 10 min 36 sec

❕ Flaky test report

No test was executed to be analysed.

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

/test : Re-trigger the build.
/package : Generate the packages and run the E2E tests.
/beats-tester : Run the installation tests with beats-tester.
run elasticsearch-ci/docs : Re-trigger the docs validation. (use unformatted text in the comment!)

elasticmachine · 2023-11-22T09:53:27Z

💚 Build Succeeded

Expand to view the summary

Build stats

Duration: 9 min 41 sec

❕ Flaky test report

No test was executed to be analysed.

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

/test : Re-trigger the build.
/package : Generate the packages and run the E2E tests.
/beats-tester : Run the installation tests with beats-tester.
run elasticsearch-ci/docs : Re-trigger the docs validation. (use unformatted text in the comment!)

winlogbeat/docs/getting-started.asciidoc

andrewkroh · 2023-11-22T13:59:58Z

winlogbeat/docs/getting-started.asciidoc

@@ -150,6 +150,26 @@ Before starting {beatname_uc}, modify the user credentials in
 +{beatname_lc}.yml+ and specify a user who is
 <<privileges-to-publish-events,authorized to publish events>>.


Either use {beatname_uc} or {beatname_lc} instead of "Winlogbeat" and "winlogbeat" respectively.

@andrewkroh I updated them. But in the PR, I don't see them getting transformed into "Winlogbeat" and "winlogbeat". Is that applied during the CI?

winlogbeat/docs/getting-started.asciidoc

elasticmachine · 2023-11-23T09:25:43Z

💚 Build Succeeded

Expand to view the summary

Build stats

Start Time: 2023-11-23T09:17:21.527+0000
Duration: 8 min 17 sec

❕ Flaky test report

No test was executed to be analysed.

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

/test : Re-trigger the build.
/package : Generate the packages and run the E2E tests.
/beats-tester : Run the installation tests with beats-tester.
run elasticsearch-ci/docs : Re-trigger the docs validation. (use unformatted text in the comment!)

elasticmachine · 2023-11-23T11:52:20Z

💚 Build Succeeded

Expand to view the summary

Build stats

Start Time: 2023-11-23T11:43:55.913+0000
Duration: 8 min 19 sec

❕ Flaky test report

No test was executed to be analysed.

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

/test : Re-trigger the build.
/package : Generate the packages and run the E2E tests.
/beats-tester : Run the installation tests with beats-tester.
run elasticsearch-ci/docs : Re-trigger the docs validation. (use unformatted text in the comment!)

elasticmachine · 2023-11-27T14:10:47Z

💚 Build Succeeded

Expand to view the summary

Build stats

Duration: 9 min 32 sec

❕ Flaky test report

No test was executed to be analysed.

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

/test : Re-trigger the build.
/package : Generate the packages and run the E2E tests.
/beats-tester : Run the installation tests with beats-tester.
run elasticsearch-ci/docs : Re-trigger the docs validation. (use unformatted text in the comment!)

winlogbeat/docs/getting-started.asciidoc

elasticmachine · 2023-12-04T10:42:27Z

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

/test : Re-trigger the build.
/package : Generate the packages and run the E2E tests.
/beats-tester : Run the installation tests with beats-tester.
run elasticsearch-ci/docs : Re-trigger the docs validation. (use unformatted text in the comment!)

elasticmachine · 2023-12-04T10:46:08Z

💚 Build Succeeded

Expand to view the summary

Build stats

Duration: 8 min 15 sec

❕ Flaky test report

No test was executed to be analysed.

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

/test : Re-trigger the build.
/package : Generate the packages and run the E2E tests.
/beats-tester : Run the installation tests with beats-tester.
run elasticsearch-ci/docs : Re-trigger the docs validation. (use unformatted text in the comment!)

kcreddy · 2023-12-04T11:04:19Z

/test

elasticmachine · 2023-12-04T11:11:19Z

💚 Build Succeeded

Expand to view the summary

Build stats

Start Time: 2023-12-04T11:04:33.668+0000
Duration: 7 min 41 sec

❕ Flaky test report

No test was executed to be analysed.

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

/test : Re-trigger the build.
/package : Generate the packages and run the E2E tests.
/beats-tester : Run the installation tests with beats-tester.
run elasticsearch-ci/docs : Re-trigger the docs validation. (use unformatted text in the comment!)

elasticmachine · 2023-12-04T11:38:43Z

💚 Build Succeeded

Expand to view the summary

Build stats

Duration: 8 min 16 sec

❕ Flaky test report

No test was executed to be analysed.

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

/test : Re-trigger the build.
/package : Generate the packages and run the E2E tests.
/beats-tester : Run the installation tests with beats-tester.
run elasticsearch-ci/docs : Re-trigger the docs validation. (use unformatted text in the comment!)

elasticmachine · 2023-12-04T12:41:28Z

💚 Build Succeeded

Expand to view the summary

Build stats

Duration: 8 min 15 sec

❕ Flaky test report

No test was executed to be analysed.

🤖 GitHub comments

Expand to view the GitHub comments

To re-run your PR in the CI, just comment with:

/test : Re-trigger the build.
/package : Generate the packages and run the E2E tests.
/beats-tester : Run the installation tests with beats-tester.
run elasticsearch-ci/docs : Re-trigger the docs validation. (use unformatted text in the comment!)

…s required for local user account (#37176) * Document minimum permissions required for running winlogbeat as local user account (cherry picked from commit 0baba39)

…ument minimum permissions required for local user account (#37287) * winlogbeat/docs/getting-started.asciidoc: Document minimum permissions required for local user account (#37176) * Document minimum permissions required for running winlogbeat as local user account (cherry picked from commit 0baba39) --------- Co-authored-by: Krishna Chaitanya Reddy Burri <[email protected]> Co-authored-by: kcreddy <[email protected]>

…s required for local user account (elastic#37176) * Document minimum permissions required for running winlogbeat as local user account

Add permissions required for local user account

61472f6

kcreddy added the docs label Nov 22, 2023

botelastic bot added the needs_team Indicates that the issue/PR needs a Team:* label label Nov 22, 2023

mergify bot assigned kcreddy Nov 22, 2023

kcreddy changed the title ~~[Winlogbeat] Add permissions required for local user account~~ winlogbeat/docs/getting-started.asciidoc: Add permissions required for local user account Nov 22, 2023

kcreddy changed the title ~~winlogbeat/docs/getting-started.asciidoc: Add permissions required for local user account~~ winlogbeat/docs/getting-started.asciidoc: Update docs to add permissions required for local user account Nov 22, 2023

kcreddy changed the title ~~winlogbeat/docs/getting-started.asciidoc: Update docs to add permissions required for local user account~~ winlogbeat/docs/getting-started.asciidoc: Document permissions required for local user account Nov 22, 2023

kcreddy changed the title ~~winlogbeat/docs/getting-started.asciidoc: Document permissions required for local user account~~ winlogbeat/docs/getting-started.asciidoc: Document minimum permissions required for local user account Nov 22, 2023

kcreddy added 2 commits November 22, 2023 15:06

update changelog

185ed66

Merge remote-tracking branch 'upstream/main' into winlog-local-perm

175c42a

kcreddy added the Winlogbeat label Nov 22, 2023

grammar corrections

3f5ba24

kcreddy marked this pull request as ready for review November 22, 2023 09:44

kcreddy requested a review from a team as a code owner November 22, 2023 09:44

kcreddy requested a review from andrewkroh November 22, 2023 09:44

kcreddy added the Team:Security-External Integrations label Nov 22, 2023

botelastic bot removed the needs_team Indicates that the issue/PR needs a Team:* label label Nov 22, 2023

kcreddy added 8.12 candidate backport-7.17 Automated backport to the 7.17 branch with mergify labels Nov 22, 2023

andrewkroh reviewed Nov 22, 2023

View reviewed changes

kcreddy added 2 commits November 23, 2023 14:46

address PR comments

8fbd5c4

update

75edb8b

Merge remote-tracking branch 'upstream/main' into winlog-local-perm

fdbb1f9

kcreddy requested a review from andrewkroh November 27, 2023 14:00

Merge remote-tracking branch 'upstream/main' into winlog-local-perm

5f86857

efd6 reviewed Nov 28, 2023

View reviewed changes

kcreddy added 2 commits December 4, 2023 16:06

Address PR comments

3c6fdf0

Merge remote-tracking branch 'upstream/main' into winlog-local-perm

18c8eb2

kcreddy requested a review from efd6 December 4, 2023 10:37

Merge remote-tracking branch 'upstream/main' into winlog-local-perm

879f77a

Merge branch 'main' into winlog-local-perm

a0d4b31

andrewkroh approved these changes Dec 4, 2023

View reviewed changes

kcreddy merged commit 0baba39 into elastic:main Dec 4, 2023
16 checks passed

mergify bot mentioned this pull request Dec 4, 2023

[7.17](backport #37176) winlogbeat/docs/getting-started.asciidoc: Document minimum permissions required for local user account #37287

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

winlogbeat/docs/getting-started.asciidoc: Document minimum permissions required for local user account #37176

winlogbeat/docs/getting-started.asciidoc: Document minimum permissions required for local user account #37176

kcreddy commented Nov 22, 2023 •

edited

Loading

mergify bot commented Nov 22, 2023

elasticmachine commented Nov 22, 2023

Build stats

elasticmachine commented Nov 22, 2023

Build stats

elasticmachine commented Nov 22, 2023

elasticmachine commented Nov 22, 2023

Build stats

elasticmachine commented Nov 22, 2023

Build stats

andrewkroh Nov 22, 2023

kcreddy Nov 23, 2023 •

edited

Loading

elasticmachine commented Nov 23, 2023

Build stats

elasticmachine commented Nov 23, 2023

Build stats

elasticmachine commented Nov 27, 2023

Build stats

elasticmachine commented Dec 4, 2023

elasticmachine commented Dec 4, 2023

Build stats

kcreddy commented Dec 4, 2023

elasticmachine commented Dec 4, 2023

Build stats

elasticmachine commented Dec 4, 2023

Build stats

elasticmachine commented Dec 4, 2023

Build stats

		@@ -150,6 +150,26 @@ Before starting {beatname_uc}, modify the user credentials in
		+{beatname_lc}.yml+ and specify a user who is
		<<privileges-to-publish-events,authorized to publish events>>.

winlogbeat/docs/getting-started.asciidoc: Document minimum permissions required for local user account #37176

winlogbeat/docs/getting-started.asciidoc: Document minimum permissions required for local user account #37176

Conversation

kcreddy commented Nov 22, 2023 • edited Loading

Proposed commit message

Checklist

Author's Checklist

Related issues

mergify bot commented Nov 22, 2023

elasticmachine commented Nov 22, 2023

💚 Build Succeeded

Build stats

❕ Flaky test report

🤖 GitHub comments

elasticmachine commented Nov 22, 2023

❕ Build Aborted

Build stats

🤖 GitHub comments

elasticmachine commented Nov 22, 2023

elasticmachine commented Nov 22, 2023

💚 Build Succeeded

Build stats

❕ Flaky test report

🤖 GitHub comments

elasticmachine commented Nov 22, 2023

💚 Build Succeeded

Build stats

❕ Flaky test report

🤖 GitHub comments

andrewkroh Nov 22, 2023

Choose a reason for hiding this comment

kcreddy Nov 23, 2023 • edited Loading

Choose a reason for hiding this comment

elasticmachine commented Nov 23, 2023

💚 Build Succeeded

Build stats

❕ Flaky test report

🤖 GitHub comments

elasticmachine commented Nov 23, 2023

💚 Build Succeeded

Build stats

❕ Flaky test report

🤖 GitHub comments

elasticmachine commented Nov 27, 2023

💚 Build Succeeded

Build stats

❕ Flaky test report

🤖 GitHub comments

elasticmachine commented Dec 4, 2023

🤖 GitHub comments

elasticmachine commented Dec 4, 2023

💚 Build Succeeded

Build stats

❕ Flaky test report

🤖 GitHub comments

kcreddy commented Dec 4, 2023

elasticmachine commented Dec 4, 2023

💚 Build Succeeded

Build stats

❕ Flaky test report

🤖 GitHub comments

elasticmachine commented Dec 4, 2023

💚 Build Succeeded

Build stats

❕ Flaky test report

🤖 GitHub comments

elasticmachine commented Dec 4, 2023

💚 Build Succeeded

Build stats

❕ Flaky test report

🤖 GitHub comments

kcreddy commented Nov 22, 2023 •

edited

Loading

kcreddy Nov 23, 2023 •

edited

Loading