I’d like to set up anonymous access to Kibana such that users can go to http://myhost.mydomain.com:5601 and anonymously look at our Kibana dashboards, but they have to click on the login item in the left side menu to log in as the administrator to make changes (and updating the indexes is similarly restricted to a non-anonymous user). I’ve seen a couple of past threads about this:
https://groups.google.com/forum/#!topic/search-guard/S0Ad5nyVfE4
https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/search-guard/XSaPsyBCl6w/YXENtrrgBwAJ
And see that this related issue in github is now resolved:
https://github.com/floragunncom/search-guard-kibana-plugin/issues/88
But I don’t see anything in the documentation about how to configure anonymous read to not require a login while still allowing users to authenticate. I’ve tried a few variations on what other users tried in the past threads without success. Now that this is supported, what do I need to set in the configuration to enable this?
thanks,
–Andrew
When asking questions, please provide the following information:
- Search Guard and Elasticsearch version
elasticsearch 6.5.3-1
searchguard elasticsearch plugin 6.5.3-23.2
searchguard kibana plugin 6.5.3-17
- Installed and used enterprise modules, if any
none
- JVM version and operating system version
Oracle JVM 1.8.0_191
CentOS 7
-
Search Guard configuration files
-
Elasticsearch log messages on debug level
-
Other installed Elasticsearch or Kibana plugins, if any
none
Hi,
there are two pages in the docs, the first one is for enabling anon auth in Search Guard:
And this one here describes how to enable it in Kibana:
If you want to restrict your anon users to see the “Dashboards” nav entry only, you should add the anonymous backend role described in the first doc to the readonly/dashboards only users in Kibana:
···
On Tuesday, February 5, 2019 at 9:16:38 PM UTC+1, euphxenos wrote:
I’d like to set up anonymous access to Kibana such that users can go to http://myhost.mydomain.com:5601 and anonymously look at our Kibana dashboards, but they have to click on the login item in the left side menu to log in as the administrator to make changes (and updating the indexes is similarly restricted to a non-anonymous user). I’ve seen a couple of past threads about this:
https://groups.google.com/forum/#!topic/search-guard/S0Ad5nyVfE4
https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/search-guard/XSaPsyBCl6w/YXENtrrgBwAJ
And see that this related issue in github is now resolved:
https://github.com/floragunncom/search-guard-kibana-plugin/issues/88
But I don’t see anything in the documentation about how to configure anonymous read to not require a login while still allowing users to authenticate. I’ve tried a few variations on what other users tried in the past threads without success. Now that this is supported, what do I need to set in the configuration to enable this?
thanks,
–Andrew
When asking questions, please provide the following information:
- Search Guard and Elasticsearch version
elasticsearch 6.5.3-1
searchguard elasticsearch plugin 6.5.3-23.2
searchguard kibana plugin 6.5.3-17
- Installed and used enterprise modules, if any
none
- JVM version and operating system version
Oracle JVM 1.8.0_191
CentOS 7
- Search Guard configuration files
- Elasticsearch log messages on debug level
- Other installed Elasticsearch or Kibana plugins, if any
none