When testing with aliases, it seems that Kibana is requesting * (or all aliases) with each request. Search-Guard is comparing my allowed aliases (test*) to this and deciding it doesn’t match. Is there some way to tell Search-Guard to compare to the returned aliases rather than the requested ones? If Kibana requests all aliases, and it turns out that an index has an alias test-2015-07-01, search-guard will block based on the * request, and never allow the search.