anonymous kibana read access by default, while still allowing users to authenticate when needed

I’d like to set up anonymous access to Kibana such that users can go to http://myhost.mydomain.com:5601 and anonymously look at our Kibana dashboards, but they have to click on the login item in the left side menu to log in as the administrator to make changes (and updating the indexes is similarly restricted to a non-anonymous user). I’ve seen a couple of past threads about this:

https://groups.google.com/forum/#!topic/search-guard/S0Ad5nyVfE4

https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/search-guard/XSaPsyBCl6w/YXENtrrgBwAJ

And see that this related issue in github is now resolved:

https://github.com/floragunncom/search-guard-kibana-plugin/issues/88

But I don’t see anything in the documentation about how to configure anonymous read to not require a login while still allowing users to authenticate. I’ve tried a few variations on what other users tried in the past threads without success. Now that this is supported, what do I need to set in the configuration to enable this?

thanks,

–Andrew

When asking questions, please provide the following information:

  • Search Guard and Elasticsearch version

elasticsearch 6.5.3-1

searchguard elasticsearch plugin 6.5.3-23.2

searchguard kibana plugin 6.5.3-17

  • Installed and used enterprise modules, if any

none

  • JVM version and operating system version

Oracle JVM 1.8.0_191

CentOS 7

  • Search Guard configuration files

  • Elasticsearch log messages on debug level

  • Other installed Elasticsearch or Kibana plugins, if any

none

Hi,

there are two pages in the docs, the first one is for enabling anon auth in Search Guard:

And this one here describes how to enable it in Kibana:

If you want to restrict your anon users to see the “Dashboards” nav entry only, you should add the anonymous backend role described in the first doc to the readonly/dashboards only users in Kibana:

···

On Tuesday, February 5, 2019 at 9:16:38 PM UTC+1, euphxenos wrote:

I’d like to set up anonymous access to Kibana such that users can go to http://myhost.mydomain.com:5601 and anonymously look at our Kibana dashboards, but they have to click on the login item in the left side menu to log in as the administrator to make changes (and updating the indexes is similarly restricted to a non-anonymous user). I’ve seen a couple of past threads about this:

https://groups.google.com/forum/#!topic/search-guard/S0Ad5nyVfE4

https://groups.google.com/forum/?utm_medium=email&utm_source=footer#!msg/search-guard/XSaPsyBCl6w/YXENtrrgBwAJ

And see that this related issue in github is now resolved:

https://github.com/floragunncom/search-guard-kibana-plugin/issues/88

But I don’t see anything in the documentation about how to configure anonymous read to not require a login while still allowing users to authenticate. I’ve tried a few variations on what other users tried in the past threads without success. Now that this is supported, what do I need to set in the configuration to enable this?

thanks,

–Andrew

When asking questions, please provide the following information:

  • Search Guard and Elasticsearch version

elasticsearch 6.5.3-1

searchguard elasticsearch plugin 6.5.3-23.2

searchguard kibana plugin 6.5.3-17

  • Installed and used enterprise modules, if any

none

  • JVM version and operating system version

Oracle JVM 1.8.0_191

CentOS 7

  • Search Guard configuration files
  • Elasticsearch log messages on debug level
  • Other installed Elasticsearch or Kibana plugins, if any

none