problem of generate indexpattern on cluster with searchguard installed

Quesion:

I use elasticsearch cross cluster with searchguard, and I sync the config to cross cluster and elasticsearch data node(called c1). and I make two indice named test_index and .kibana on c1

but when I generate indexpattern from kibana, I can only find c1:.kibana

kibana cannot find c1:test_index, below is my config

  • Search Guard Version And Elasticsearch version:

search-guard-6:6.2.3-23.0

elasticsearch: 6.2.3

  • Installed and used enterprise modules, if any

no

  • JVM version and operating system version

java version “1.8.0_172”

Java™ SE Runtime Environment (build 1.8.0_172-b11)

Java HotSpot™ 64-Bit Server VM (build 25.172-b11, mixed mode)

  • Search Guard configuration files

sg_roles.yml:

sg_kibana_server:

cluster:

  • CLUSTER_MONITOR

  • CLUSTER_COMPOSITE_OPS

  • cluster:admin/xpack/monitoring*

  • indices:admin/template*

indices:

‘*’:

‘*’:

  • indices:admin/mappings/get*

  • indices:admin/mappings/fields/get*

  • indices:admin/get

  • indices:data/read/field_caps*

‘?kibana*’:

‘*’:

  • ALL

sg_roles_mapping.yml:

sg_kibana_server:

users:

  • kibanaserver
  • Elasticsearch log messages on debug level

  • Other installed Elasticsearch or Kibana plugins, if any

nothing