Does Transform job need to config an internal user?

OpenSearch
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser):

2.18.0

Describe the issue:
I use the opensearch webui to created a very basic transform job, with a Gruop and an aggregration.
I always gets error “Failed to index the documents” or “Failed to search data in source indices” (in another test transform job).
I don’t see any other error in data node or transform role node. (the only related log were from opensearch dashboard pod…)

Questions:

  1. which internal user does Transform job use to execute it’s actions?
    (my Openid user has all_access role, i use it define the transform jobs)

  2. if I want to check more details about the 2 errors, which keyword or term shall I search from opensearch log? or is there any setting I can incrase the log level to debug for transform jobs?

  3. if I use the _script api to store some painless scripts to opensearch first, is it possible to directly call these script from Transform as custom script?

Configuration:

Relevant Logs or Screenshots:

2

I believe you get use the GET Transform API and the details of the user associated with the job will be included in the response. Note that, when ISM creates this entry it will store a copy of the user at the time the transform was created. If the user was not mapped to all_access at that point in time than that could explain the access issues.