# search guard pricing for customized edition. and current pricing model for enterprise edition

**URL:** <https://forum.search-guard.com/t/search-guard-pricing-for-customized-edition-and-current-pricing-model-for-enterprise-edition/1151>\
**Category:** Search Guard\
**Created:** [October 12, 2018, 7:12am UTC](https://forum.search-guard.com/t/search-guard-pricing-for-customized-edition-and-current-pricing-model-for-enterprise-edition/1151 "2018-10-12T07:12:50Z")\
**Posts on this page:** 10\
**Page:** 1

<div class="post-metadata">

**Author:** ![Manjushree\_Gokhale](https://avatars.discourse-cdn.com/v4/letter/m/f07891/32.png) [@Manjushree\_Gokhale](https://forum.search-guard.com/u/Manjushree_Gokhale)\
**Post date:** [October 12, 2018, 7:12am UTC](https://forum.search-guard.com/t/search-guard-pricing-for-customized-edition-and-current-pricing-model-for-enterprise-edition/1151/1 "2018-10-12T07:12:50Z")

</div>

When asking questions, please provide the following information:

- Search Guard and Elasticsearch version

- Installed and used enterprise modules, if any

- JVM version and operating system version

- Search Guard configuration files

- Elasticsearch log messages on debug level

- Other installed Elasticsearch or Kibana plugins, if any

hello guys,

in our project we have ELK 6.4 stack setup on kubernetes cluster where we wanted to use x-pack features for role based access control. I came across with Search Guard and its features.

I have few questions listed below:-

1. what is the cost/pricing of enterprise edition?

2. for custom edition where i want to use AD/LDAB feature in my community edition. then what will be the cost/pricing?

3. can i use external LDAB and use it in search guard for RBAC?

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [October 15, 2018, 1:46pm UTC](https://forum.search-guard.com/t/search-guard-pricing-for-customized-edition-and-current-pricing-model-for-enterprise-edition/1151/2 "2018-10-15T13:46:11Z")

</div>

Hi there,

first, if you want to use ES/SG with Kubernetes, we have just published helm charts which might help you with the setup:

> **[GitHub - floragunncom/search-guard-helm: Search Guard Helm Chart for Kubernetes](https://github.com/floragunncom/search-guard-helm)**
>
> Search Guard Helm Chart for Kubernetes. Contribute to floragunncom/search-guard-helm development by creating an account on GitHub.

The helm charts are experimental at the moment but can serve as a starting point.

Yes, you can use an external LDAP server for authentication and authorization:

> **[Authentication](https://docs.search-guard.com/latest/active-directory-ldap-authentication)**
>
> Use Search Guard's Active Directory and LDAP feature to authenticate users.

> **[Authorisation](https://docs.search-guard.com/latest/active-directory-ldap-authorisation)**
>
> Use Search Guards Active Directory and LDAP feature to fetch the roles of a user from an Active Directory server.

Regarding pricing, I suggest to reach out to the sales team for an individual offer. You can either use the webform:

> **[Contact the Search Guard team - get in touch with us](https://search-guard.com/contacts/)**
>
> Any questions regarding Search Guard licensing or pricing? Do you need OEM licenses or want to partner with us? Please fill out the contact form and we will get back to you as soon as possible.

Or just drop us an email: [sales@search-guard.com](mailto:sales@search-guard.com)

> **···**
>
> On Friday, October 12, 2018 at 9:12:50 AM UTC+2, Manjushree Gokhale wrote:
> 
> > When asking questions, please provide the following information:
> 
> > - Search Guard and Elasticsearch version
> 
> > - Installed and used enterprise modules, if any
> 
> > - JVM version and operating system version
> 
> > - Search Guard configuration files
> 
> > - Elasticsearch log messages on debug level
> 
> > - Other installed Elasticsearch or Kibana plugins, if any
> 
> > 
> 
> > hello guys,
> 
> > 
> 
> > in our project we have ELK 6.4 stack setup on kubernetes cluster where we wanted to use x-pack features for role based access control. I came across with Search Guard and its features.
> 
> > I have few questions listed below:-
> 
> > 
> 
> > 1. what is the cost/pricing of enterprise edition?
> 
> > 1. for custom edition where i want to use AD/LDAB feature in my community edition. then what will be the cost/pricing?
> 
> > 1. can i use external LDAB and use it in search guard for RBAC?
> 
> > 
> 
> > 
> 
> >

---

<div class="post-metadata">

**Author:** ![Manjushree\_Gokhale](https://avatars.discourse-cdn.com/v4/letter/m/f07891/32.png) [@Manjushree\_Gokhale](https://forum.search-guard.com/u/Manjushree_Gokhale)\
**Post date:** [October 17, 2018, 7:09am UTC](https://forum.search-guard.com/t/search-guard-pricing-for-customized-edition-and-current-pricing-model-for-enterprise-edition/1151/3 "2018-10-17T07:09:29Z")

</div>

Hi,

thank you for highlighting upon helm charts.  
our team is focusing upon RBAC facility with respect to kibana dashboard access to customer and users.

while doing this I also got some questions regarding our Prometheus and grafana, as it is also using same elastic search. so definitely we want to implement RBAC for grafana as well.

so my questions are -

1. the roles i will be configuring will be index level which will help kibana to showcase restricted access on its dashboard, how i can achieve the same on Grafana dashboard?

2. our prometheus exporter is also there which is using same elastic search. so how search guard can help in case of Prometheus?

> **···**
>
> > >
> 
> > >
> 
> > >

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [October 17, 2018, 6:21pm UTC](https://forum.search-guard.com/t/search-guard-pricing-for-customized-edition-and-current-pricing-model-for-enterprise-edition/1151/4 "2018-10-17T18:21:36Z")

</div>

Hi,

all security restrictions are applied directly on the ES cluster. Which basically means it does not matter with which tool you connect. The index-level restrictions for a users role(s) are always applied.

Having said that, it really depends on the tool and if the tool is able to use HTTP Basic authentication for logged in users when talking to Elasticsearch. I know that when configuring an ES datasource in Grafana, you can add HTTP Basic authentication information. However, these credentials are then used for all requests to ES. What you want is that Grafan adds the logged in users credentials for every request it makes to ES. If this is possible is currently out of my knowledge. There seen to be some PRs around it, like this one:

> <https://github.com/grafana/grafana/issues/10971>
>
> In some setups (ex openshift), the Datasource will require Grafana to pass any h…eaders when sending queries. Which is something Grafana currently does not support. 
> 
> The way we want to see this problem solved is by
> \* Make it a configuration to add any header for any HTTP based datasource (in other words almost everyone)
> \* Store the headers encrypted using the \`SecureJsonFields\` (only accessible by the backend) on the datasource.
> \* Add the header in Grafanas data proxy. So that end users never are able to see it in plain text.
> 
> Header names should be stored as an nested json in \`jsonData\`
> https://github.com/grafana/grafana/blob/master/public/app/features/plugins/partials/ds\_http\_settings.html#L130
> 
> Header values should be stored in the \`SecureJsonData\` field ex https://github.com/grafana/grafana/blob/master/public/app/features/plugins/partials/ds\_http\_settings.html#L89
> 
> Headers should be added at https://github.com/grafana/grafana/blob/master/pkg/api/pluginproxy/ds\_proxy.go#L102

But I don’t know at the moment if this is really what you need. You might want to ask on the Grafana forum if this is something they provide (passing the logged in users credentials when talking to an ES datasource).

> **···**
>
> On Wednesday, October 17, 2018 at 9:08:12 AM UTC+2, Manjushree Gokhale wrote:
> 
> > Hi,
> 
> > 
> 
> > thank you for highlighting upon helm charts.  
> > our team is focusing upon RBAC facility with respect to kibana dashboard access to customer and users.
> 
> > 
> 
> > while doing this I also got some questions regarding our Prometheus and grafana, as it is also using same elastic search. so definitely we want to implement RBAC for grafana as well.
> 
> > so my questions are -
> 
> > 
> 
> > 1. the roles i will be configuring will be index level which will help kibana to showcase restricted access on its dashboard, how i can achieve the same on Grafana dashboard?
> 
> > 1. our prometheus exporter is also there which is using same elastic search. so how search guard can help in case of Prometheus?
> 
> > > >
> 
> > > >
> 
> > > >

---

<div class="post-metadata">

**Author:** ![Manjushree\_Gokhale](https://avatars.discourse-cdn.com/v4/letter/m/f07891/32.png) [@Manjushree\_Gokhale](https://forum.search-guard.com/u/Manjushree_Gokhale)\
**Post date:** [October 29, 2018, 6:14am UTC](https://forum.search-guard.com/t/search-guard-pricing-for-customized-edition-and-current-pricing-model-for-enterprise-edition/1151/5 "2018-10-29T06:14:19Z")

</div>

> > > > I am trying to implement Search guard setup on my ELK cluster(6.3.2). where i have disabled X-pack features.

I tried installing the SG plugin 23.1 which is compatible with my ELK version. but i am getting invalid argument error.

I am using base image of [Quay](http://quay.io/pires) elasticsearch. I also tried installing the same with downloading package first and then elasticsearch-plugin install commnad. still getting same error.

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [October 29, 2018, 2:34pm UTC](https://forum.search-guard.com/t/search-guard-pricing-for-customized-edition-and-current-pricing-model-for-enterprise-edition/1151/6 "2018-10-29T14:34:09Z")

</div>

Where do you see the invalid argument error? Can you post your logfiles?

> **···**
>
> On Monday, October 29, 2018 at 7:14:20 AM UTC+1, Manjushree Gokhale wrote:
> 
> > > > > > I am trying to implement Search guard setup on my ELK cluster(6.3.2). where i have disabled X-pack features.
> 
> > I tried installing the SG plugin 23.1 which is compatible with my ELK version. but i am getting invalid argument error.
> 
> > I am using base image of [quay.io/pires](http://quay.io/pires) elasticsearch. I also tried installing the same with downloading package first and then elasticsearch-plugin install commnad. still getting same error.
> 
> > 
> 
> > 
> 
> >

---

<div class="post-metadata">

**Author:** ![Manjushree\_Gokhale](https://avatars.discourse-cdn.com/v4/letter/m/f07891/32.png) [@Manjushree\_Gokhale](https://forum.search-guard.com/u/Manjushree_Gokhale)\
**Post date:** [October 31, 2018, 5:46am UTC](https://forum.search-guard.com/t/search-guard-pricing-for-customized-edition-and-current-pricing-model-for-enterprise-edition/1151/7 "2018-10-31T05:46:05Z")

</div>

Hi,

I have successfully installed searchguard plugin in elasticsearch. now i am working on searchguard-kibana-plugin.

and during this i am getting below listed error

Attempting to transfer from [https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-kibana-plugin/6.3.2-15/search-guard-kibana-plugin-6.3.2-15.zip](https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-kibana-plugin/6.3.2-15/search-guard-kibana-plugin-6.3.2-15.zip)

Transferring 2054581 bytes…

Transfer complete

Retrieving metadata from plugin archive

Extracting plugin archive

Extraction complete

Optimizing and caching browser bundles…

Plugin installation was unsuccessful due to error "Command failed: /usr/share/kibana/node/bin/node /usr/share/kibana/src/cli –[env.name](http://env.name)=production --optimize.useBundleCache=false --server.autoListen=false --plugins.initialize=false --uiSettings.enabled=false

FATAL CLI ERROR Error: ENOENT: no such file or directory, open ‘/usr/share/kibana/config/kibana.yml’

at Object.fs.openSync (fs.js:646:18)

at fs.readFileSync (fs.js:551:33)

at files.map.path (/usr/share/kibana/src/cli/serve/read\_yaml\_config.js:52:78)

at Array.map ()

at readYamlConfig (/usr/share/kibana/src/cli/serve/read\_yaml\_config.js:52:23)

at readServerSettings (/usr/share/kibana/src/cli/serve/serve.js:150:57)

at getCurrentSettings (/usr/share/kibana/src/cli/serve/serve.js:32:38)

at Command. (/usr/share/kibana/src/cli/serve/serve.js:33:22)

at Command. (/usr/share/kibana/src/cli/command.js:97:20)

at Command.listener (/usr/share/kibana/node\_modules/commander/index.js:301:8)

"

The command ‘/bin/sh -c kibana-plugin install [https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-kibana-plugin/6.3.2-15/search-guard-kibana-plugin-6.3.2-15.zip](https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-kibana-plugin/6.3.2-15/search-guard-kibana-plugin-6.3.2-15.zip)’ returned a non-zero code: 70

ERROR: Job failed: exit code 1

i did checked my kibana.yml for any spell mistakes but is seems fine to me.

also sending my kibana.yml which contains basic configuration.

please do have a look.

> **···**
>
> * * *
> 
> server.name: kibana
> 
> server.host: “0.0.0.0”
> 
> elasticsearch.url: [http://elasticsearch-host-url](http://elasticsearch-host-url)
> 
> > >

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [November 6, 2018, 11:23am UTC](https://forum.search-guard.com/t/search-guard-pricing-for-customized-edition-and-current-pricing-model-for-enterprise-edition/1151/8 "2018-11-06T11:23:34Z")

</div>

This just seems like the kibana.yml file is not present in /usr/share/kibana/config/. Kibana will check the configuration upon plugin install.

> **···**
>
> On Wednesday, October 31, 2018 at 6:41:05 AM UTC+1, Manjushree Gokhale wrote:
> 
> > Hi,
> 
> > I have successfully installed searchguard plugin in elasticsearch. now i am working on searchguard-kibana-plugin.
> 
> > and during this i am getting below listed error
> 
> > 
> 
> > 
> 
> > Attempting to transfer from [https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-kibana-plugin/6.3.2-15/search-guard-kibana-plugin-6.3.2-15.zip](https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-kibana-plugin/6.3.2-15/search-guard-kibana-plugin-6.3.2-15.zip)
> 
> > Transferring 2054581 bytes…
> 
> > Transfer complete
> 
> > Retrieving metadata from plugin archive
> 
> > Extracting plugin archive
> 
> > Extraction complete
> 
> > Optimizing and caching browser bundles…
> 
> > Plugin installation was unsuccessful due to error "Command failed: /usr/share/kibana/node/bin/node /usr/share/kibana/src/cli –[env.name](http://env.name)=production --optimize.useBundleCache=false --server.autoListen=false --plugins.initialize=false --uiSettings.enabled=false
> 
> > 
> 
> > FATAL CLI ERROR Error: ENOENT: no such file or directory, open ‘/usr/share/kibana/config/kibana.yml’
> 
> > at Object.fs.openSync (fs.js:646:18)
> 
> > at fs.readFileSync (fs.js:551:33)
> 
> > at files.map.path (/usr/share/kibana/src/cli/serve/read\_yaml\_config.js:52:78)
> 
> > at Array.map ()
> 
> > at readYamlConfig (/usr/share/kibana/src/cli/serve/read\_yaml\_config.js:52:23)
> 
> > at readServerSettings (/usr/share/kibana/src/cli/serve/serve.js:150:57)
> 
> > at getCurrentSettings (/usr/share/kibana/src/cli/serve/serve.js:32:38)
> 
> > at Command. (/usr/share/kibana/src/cli/serve/serve.js:33:22)
> 
> > at Command. (/usr/share/kibana/src/cli/command.js:97:20)
> 
> > at Command.listener (/usr/share/kibana/node\_modules/commander/index.js:301:8)
> 
> > "
> 
> > The command ‘/bin/sh -c kibana-plugin install [https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-kibana-plugin/6.3.2-15/search-guard-kibana-plugin-6.3.2-15.zip](https://oss.sonatype.org/service/local/repositories/releases/content/com/floragunn/search-guard-kibana-plugin/6.3.2-15/search-guard-kibana-plugin-6.3.2-15.zip)’ returned a non-zero code: 70
> 
> > ERROR: Job failed: exit code 1
> 
> > 
> 
> > i did checked my kibana.yml for any spell mistakes but is seems fine to me.
> 
> > 
> 
> > also sending my kibana.yml which contains basic configuration.
> 
> > please do have a look.
> 
> > 
> 
> > * * *
> 
> > server.name: kibana
> 
> > server.host: “0.0.0.0”
> 
> > elasticsearch.url: [http://elasticsearch-host-url](http://elasticsearch-host-url)
> 
> > 
> 
> > > >

---

<div class="post-metadata">

**Author:** ![Manjushree\_Gokhale](https://avatars.discourse-cdn.com/v4/letter/m/f07891/32.png) [@Manjushree\_Gokhale](https://forum.search-guard.com/u/Manjushree_Gokhale)\
**Post date:** [November 12, 2018, 7:21am UTC](https://forum.search-guard.com/t/search-guard-pricing-for-customized-edition-and-current-pricing-model-for-enterprise-edition/1151/9 "2018-11-12T07:21:21Z")

</div>

hey,

I am facing issues while logging kibana dashboard.

i have updated elasticsearch.requestHeadersWhitelist: [“Authorization”, “sg\_tenant”] in kibana.yml

still on every login i am redirected to the same kibana dashboard.

and when i curl the same it says 401 Authorization Required.

can you please help me with this.

---

<div class="post-metadata">

**Author:** ![jkressin](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/jkressin/32/9_2.png) [@jkressin](https://forum.search-guard.com/u/jkressin)\
**Post date:** [November 13, 2018, 5:15pm UTC](https://forum.search-guard.com/t/search-guard-pricing-for-customized-edition-and-current-pricing-model-for-enterprise-edition/1151/10 "2018-11-13T17:15:12Z")

</div>

What do you mean exactly by "and when i curl the same " What is the curl call you are executing?

> **···**
>
> On Monday, November 12, 2018 at 8:21:21 AM UTC+1, Manjushree Gokhale wrote:
> 
> > hey,
> 
> > I am facing issues while logging kibana dashboard.
> 
> > i have updated elasticsearch.requestHeadersWhitelist: [“Authorization”, “sg\_tenant”] in kibana.yml
> 
> > still on every login i am redirected to the same kibana dashboard.
> 
> > and when i curl the same it says 401 Authorization Required.
> 
> > 
> 
> > can you please help me with this.