I wanted to increase the Timeout on Kibana from 1 hr to 1 day. I added in the following settings to kibana.yml: kibana.yml: searchguard.cookie.ttl: 86400000 searchguard.session.ttl: 86400000 However, I still get logged out after 1 hr. Versions: Elasticsearch: 7.1.1 Searchguard: 7.1.1-35.1.0 K…

Actually I was able to fix that. I did not have the JWT token expiry set on sg_config.yml Adding that fixed it. Thank you for your help.

Hi there, a couple of questions: What auth type are you using? If you have a JWT with an expiration (“exp”) value set, that trumps the other settings. Could you please check if searchguard.session.keepalive is enabled? It should be true by default though. Best Regards Mike

Thanks for the response. I have SAML auth set up with Okta, but do not have a specific value set for JWT expiration Yes the default is true, also tried adding that as explicitly, did not change anything. I understand there might be some setting on Okta side to increase the expiration on the token…

The only thing I can think of is that Okta sets the “exp” in the payload. When authenticating, the plugin checks for that property and disables the session keepAlive: https://github.com/floragunncom/search-guard-kibana-plugin/blob/master/lib/auth/types/saml/Saml.js#L55-L61 If the session expires,…

Hey Mike, did you get a chance to test your theory out?

Sorry for the late reply, I got caught up by the Kibana 7.2 release. But yes, I did test it with SAML and in my test the plugin behaved as expected. Meaning - if there is an expiration set in the response from the Identity Provider (Okta in your case), this value is respected and after the expirat…

Increase Kibana Timeout does not work

Search Guard

Mike July 8, 2019, 1:27pm 9

Ahh that explains it. Glad it worked out for you, and thanks for posting your solution!

searchguard.session.ttl seems not working in 6.5.4 Kibana.

Topic		Replies	Views
Kibana + SearchGuard , session timeout Search Guard	0	407	August 14, 2017
Configure session timeout and lifespan (openid with kibana) Search Guard	1	875	August 12, 2021
Session timeout Search Guard	6	1481	September 11, 2019
searchguard.session.ttl seems not working in 6.5.4 Kibana. Search Guard	20	2759	August 7, 2019
Sudden logout while using Kibana Search Guard	1	459	August 28, 2018

Increase Kibana Timeout does not work

Related topics