Create New User

Hi,

How to Create new user in elasticsearch.

thanakyou,

vinod

How you add new users depends on the authentication backend you want to use (LDAP, internal etc.)

You can find general installation instructions, including LDPA etc., here:

https://github.com/floragunncom/search-guard-docs/blob/master/configuration.md

If you want to use the internal user database, you can find an in-depth example in the Kibana section of the documentation as well:

https://github.com/floragunncom/search-guard-docs/blob/master/kibana.md

After you made your configuration changes, do not forget to push these changes by using the sgadmin command line tool. See section “Hot config reloading: Using sgadmin” in the configuration chapter of the docs.

···

Am Mittwoch, 29. Juni 2016 08:58:41 UTC+2 schrieb Vin:

Hi,

How to Create new user in elasticsearch.

thanakyou,

vinod

hi,

I am able to create new users with all permissions,but How to create a user with read only permissions.

I have followed the below steps.

  1. i have created a user in sg_internal_users.yml file

  2. i have mapped that user in sg_roles_mapping.yml ,like below

sg_public:

users:

  • ‘analyst’
  1. i have given read permissions to sg_roles.yml

sg_public:

indices:

‘*’:

‘*’:

  • READ

  • GET

  • SEARCH

  • DATA_ACCESS

  1. all works good, but when i tried to read the data from kibana UI it is showing balnk page like below

what is the issue, and how to solve it.

Thankyou

···

On Wednesday, 29 June 2016 12:28:41 UTC+5:30, Vin wrote:

Hi,

How to Create new user in elasticsearch.

thanakyou,

vinod

try:

sg_public:
  indices:
    '*':
      '*':
        - indices:admin/mappings/fields/get*
        - indices:admin/validate/query*
        - indices:admin/get*
        - READ
        - GET
        - SEARCH
        - DATA_ACCESS
    '?kibana':
      '*':
        - indices:admin/exists*
        - indices:admin/mapping/put*
        - indices:admin/mappings/fields/get*
        - indices:admin/refresh*
        - indices:admin/validate/query*
        - indices:data/read/get*
        - indices:data/read/mget*
        - indices:data/read/search*
        - indices:data/write/delete*
        - indices:data/write/index*
        - indices:data/write/update*

···

Am 30.06.2016 um 10:49 schrieb Vin <rapoluvinod@gmail.com>:

hi,
I am able to create new users with all permissions,but How to create a user with read only permissions.

I have followed the below steps.

1) i have created a user in sg_internal_users.yml file
2) i have mapped that user in sg_roles_mapping.yml ,like below

sg_public:
  users:
    - 'analyst'

3) i have given read permissions to sg_roles.yml

sg_public:
  indices:
    '*':
      '*':
        - READ
        - GET
        - SEARCH
        - DATA_ACCESS

4) all works good, but when i tried to read the data from kibana UI it is showing balnk page like below

what is the issue, and how to solve it.

Thankyou

On Wednesday, 29 June 2016 12:28:41 UTC+5:30, Vin wrote:
Hi,

How to Create new user in elasticsearch.

thanakyou,
vinod

--
You received this message because you are subscribed to the Google Groups "Search Guard" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.
To post to this group, send email to search-guard@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/756997ff-abaf-4da7-a8ed-f2003b4173ff%40googlegroups.com\.
For more options, visit https://groups.google.com/d/optout\.

Its Working…

Thank you So much :slight_smile:

···

On Wednesday, 6 July 2016 17:50:38 UTC+5:30, SG wrote:

try:

sg_public:

indices:

'*':

  '*':

    - indices:admin/mappings/fields/get*

    - indices:admin/validate/query*

    - indices:admin/get*

    - READ

    - GET

    - SEARCH

    - DATA_ACCESS

'?kibana':

  '*':

    - indices:admin/exists*

    - indices:admin/mapping/put*

    - indices:admin/mappings/fields/get*

    - indices:admin/refresh*

    - indices:admin/validate/query*

    - indices:data/read/get*

    - indices:data/read/mget*

    - indices:data/read/search*

    - indices:data/write/delete*

    - indices:data/write/index*

    - indices:data/write/update*

Am 30.06.2016 um 10:49 schrieb Vin rapol...@gmail.com:

hi,
I am able to create new users with all permissions,but How to create a user with read only permissions.

I have followed the below steps.

  1. i have created a user in sg_internal_users.yml file
  1. i have mapped that user in sg_roles_mapping.yml ,like below

sg_public:

users:

- 'analyst'
  1. i have given read permissions to sg_roles.yml

sg_public:

indices:

'*':
  '*':
    - READ
    - GET
    - SEARCH
    - DATA_ACCESS
  1. all works good, but when i tried to read the data from kibana UI it is showing balnk page like below

what is the issue, and how to solve it.

Thankyou

On Wednesday, 29 June 2016 12:28:41 UTC+5:30, Vin wrote:

Hi,

How to Create new user in elasticsearch.

thanakyou,

vinod


You received this message because you are subscribed to the Google Groups “Search Guard” group.

To unsubscribe from this group and stop receiving emails from it, send an email to search-guard...@googlegroups.com.

To post to this group, send email to search...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/756997ff-abaf-4da7-a8ed-f2003b4173ff%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

And I have One More Doubt…

How can we give read only permissions to the selected indexes.

···

On Wednesday, 29 June 2016 12:28:41 UTC+5:30, Vin wrote:

Hi,

How to Create new user in elasticsearch.

thanakyou,

vinod

sg_public:
  indices:
    'the_index_which should_be_readonly':
      '*':
        - indices:admin/mappings/fields/get*
        - indices:admin/validate/query*
        - indices:admin/get*
        - READ
    '?kibana':
      '*':
        - indices:admin/exists*
        - indices:admin/mapping/put*
        - indices:admin/mappings/fields/get*
        - indices:admin/refresh*
        - indices:admin/validate/query*
        - indices:data/read/get*
        - indices:data/read/mget*
        - indices:data/read/search*
        - indices:data/write/delete*
        - indices:data/write/index*
        - indices:data/write/update*

···

Am 06.07.2016 um 14:34 schrieb Vin <rapoluvinod@gmail.com>:

And I have One More Doubt..

How can we give read only permissions to the selected indexes.

On Wednesday, 29 June 2016 12:28:41 UTC+5:30, Vin wrote:
Hi,

How to Create new user in elasticsearch.

thanakyou,
vinod

--
You received this message because you are subscribed to the Google Groups "Search Guard" group.
To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.
To post to this group, send email to search-guard@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/27bf40cf-04cc-42e7-8ed0-ba7d31126e4b%40googlegroups.com\.
For more options, visit https://groups.google.com/d/optout\.

Thankyou… :slight_smile:

···

On Wednesday, 29 June 2016 12:28:41 UTC+5:30, Vin wrote:

Hi,

How to Create new user in elasticsearch.

thanakyou,

vinod