sg_roles.yml setting to show only certain indices to certain users in Kibana?

Search Guard
1

I’m using ES v2.4.1 and corresponding SG+SSL and SG v2.4.1.x versions.

So I setup some logstash indices, and say I called them logstash-customer1, logstash-customer2, logstash-customerN. I’m able to set it up so user_customer1 can view logstash-customer1 data ONLY, user_customer2 for logstash-customer2 data, etc.

However, user_customer1 can still see all the index patterns on the left pane. How can I set this so user_customer1 ONLY sees logstash-customer1 index on left pane, user_customer2 only sees logstash-customer2 index, etc?

2

Unfortunately due to limitations in Kibana that’s not possible. Index patterns, visualizations and dashboards are stored by the kibana server user in the “global” .kibana index. That means that albeit not all users have access to all indices, they still share all dashboards, visualizations etc.

True multi-tenancy support would require changing Kibana itself.

···

Am Donnerstag, 1. Dezember 2016 18:09:09 UTC+1 schrieb ZillaYT:

I’m using ES v2.4.1 and corresponding SG+SSL and SG v2.4.1.x versions.

So I setup some logstash indices, and say I called them logstash-customer1, logstash-customer2, logstash-customerN. I’m able to set it up so user_customer1 can view logstash-customer1 data ONLY, user_customer2 for logstash-customer2 data, etc.

However, user_customer1 can still see all the index patterns on the left pane. How can I set this so user_customer1 ONLY sees logstash-customer1 index on left pane, user_customer2 only sees logstash-customer2 index, etc?

3

Thanks for the reply!

···

On Thursday, December 1, 2016 at 12:13:41 PM UTC-5, Jochen Kressin wrote:

Unfortunately due to limitations in Kibana that’s not possible. Index patterns, visualizations and dashboards are stored by the kibana server user in the “global” .kibana index. That means that albeit not all users have access to all indices, they still share all dashboards, visualizations etc.

True multi-tenancy support would require changing Kibana itself.

Am Donnerstag, 1. Dezember 2016 18:09:09 UTC+1 schrieb ZillaYT:

I’m using ES v2.4.1 and corresponding SG+SSL and SG v2.4.1.x versions.

So I setup some logstash indices, and say I called them logstash-customer1, logstash-customer2, logstash-customerN. I’m able to set it up so user_customer1 can view logstash-customer1 data ONLY, user_customer2 for logstash-customer2 data, etc.

However, user_customer1 can still see all the index patterns on the left pane. How can I set this so user_customer1 ONLY sees logstash-customer1 index on left pane, user_customer2 only sees logstash-customer2 index, etc?