# Search Guard v10 released (Important security fixes for DLS/FLS and Auditlog)

**URL:** <https://forum.search-guard.com/t/search-guard-v10-released-important-security-fixes-for-dls-fls-and-auditlog/360>\
**Category:** Search Guard\
**Created:** [January 9, 2017, 7:47pm UTC](https://forum.search-guard.com/t/search-guard-v10-released-important-security-fixes-for-dls-fls-and-auditlog/360 "2017-01-09T19:47:09Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![searchguard\_google\_group](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/searchguard_google_group/32/462_2.png) [@searchguard\_google\_group](https://forum.search-guard.com/u/searchguard_google_group)\
**Post date:** [January 9, 2017, 7:47pm UTC](https://forum.search-guard.com/t/search-guard-v10-released-important-security-fixes-for-dls-fls-and-auditlog/360/1 "2017-01-09T19:47:09Z")

</div>

We’re happy to announce the 10th Search Guard Release today.

This is a bugfix release which contains an important bugfix for DLS/FLS and Auditlog.

If you use one of this features please upgrade as soon as possible.

Please find more details here: [GitHub - floragunncom/search-guard: Search Guard Plugin - Security for Elasticsearch](https://github.com/floragunncom/search-guard/wiki/SecurityIssues)

Search Guard Version 10:

- Add missing auditlog hooks and configuration properties (#SISG 5)
- Fix possible class cast exception when logging on TRACE level
- Fix [XFF Proxies - documentation, default values and implementation inconsistention #255](https://github.com/floragunncom/search-guard/issues/255)
- Fix [Bug in XFFResolver.java - bad type of request #256](https://github.com/floragunncom/search-guard/issues/256)
- Fix Kerberos configuration examples
- Add username\_attribute for http client cert authenticator
- Mark http host authenticator deprecated. Host based authentication is supported via roles\_mapping.yml (and was always), [#214](https://github.com/floragunncom/search-guard/issues/214)
- Resolve index patterns correctly for DLS and FLS, changed default indices options to lenientExpandOpen, [#266](https://github.com/floragunncom/search-guard/issues/266) (#SISG 4)
- Add `--diagnose, --delete-config-index and --enable-shard-allocation` options to sgadmin
- Fix duplicated authorizers (clear authorizers on change)
- Fix [?pretty=true does not work #259](https://github.com/floragunncom/search-guard/issues/259)
- Fix default permissions in templates
  - [Kibana RO users need cluster indices:data/read\* permissions #262](https://github.com/floragunncom/search-guard/issues/262)
  - [Kibana needs CLUSTER\_MONITOR permission to #263](https://github.com/floragunncom/search-guard/issues/263)
  - [Logstash needs cluster:monitor/main permissions #267](https://github.com/floragunncom/search-guard/pull/267)

- Fix a problem with `authinfo` endpoint if an exception were raised (builder object was left in a dirty state)
- Add missing searchguard.config\_index\_name property
- Add support for webhooks as auditlog destination

Details: [GitHub - floragunncom/search-guard: Search Guard Plugin - Security for Elasticsearch](https://github.com/floragunncom/search-guard/wiki)

Commercial support is available: [Licensing | Search Guard Community, Enterprise and Compliance Edition](https://floragunn.com/searchguard/searchguard-license-support/)

> **···**
>
> * * *
> 
> Search Guard (®) is an Elasticsearch plugin that offers encryption, authentication and authorisation.
> 
> It builds on Search Guard SSL and provides pluggable auth/auth modules in addition.