From b426e85b3f9ba70500b62046be34a1dd9c14f887 Mon Sep 17 00:00:00 2001
From: Mirko Bez <herrBez@users.noreply.github.com>
Date: Thu, 21 Mar 2024 17:36:51 +0100
Subject: [PATCH] Update users.asciidoc

Add the "read_pipeline" privilege for Winlogbeat too
---
 libbeat/docs/security/users.asciidoc | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/libbeat/docs/security/users.asciidoc b/libbeat/docs/security/users.asciidoc
index 0e2d11bcc34..cdd8889d0f0 100644
--- a/libbeat/docs/security/users.asciidoc
+++ b/libbeat/docs/security/users.asciidoc
@@ -270,6 +270,12 @@ ifeval::["{beatname_lc}"=="filebeat"]
 |Check for ingest pipelines used by modules. Needed when using modules.
 endif::[]
 
+ifeval::["{beatname_lc}"=="winlogbeat"]
+|Cluster
+|`read_pipeline`
+|Check for ingest pipelines used by winlogbeat.
+endif::[]
+
 |Index
 |`create_doc` on +{beat_default_index_prefix}-*+ indices
 |Write events into {es}