User Based Access to Kibana

Search Guard
1

Hello Team,

I am using SG 2.4 with Elastic Search 2.4.1 and Kibana 4.6

I have read the past topics but couldn’t find any solution.

Let me explain my scenario:

  • We have 2 servers sending logs to Elasticsearch.
  • Hence we have 2 indices named index_log1 and index_log2
  • I have created 2 users named user1 and user2
  • The objective is user1 should be able to use Kibana to add index_log1 and view all data in that index
  • Similarly, user2 should be able to use Kibana to add index_log2 and view all data in that index.
  • Both the users should not be able to see other’s index. The index should not be visible in the Settings tab nor in the Discover tab
    I tried various roles but either the user will not be able to see anything or they will still see the index visible in Kibana but cannot see the data. But I want to even hide the Index from visible to that user.

I am not able to proceed. Please assist.

2

In my solustion, I will change the kibana index to index_log* ,When you login user1 ,use search guard you will only see flied_status of index_log1 .Has search guard have any ideas?

···

2016-10-28 20:17 GMT+08:00 Sonny L sonnylaskar@gmail.com:

Hello Team,

I am using SG 2.4 with Elastic Search 2.4.1 and Kibana 4.6

I have read the past topics but couldn’t find any solution.

Let me explain my scenario:

  • We have 2 servers sending logs to Elasticsearch.
  • Hence we have 2 indices named index_log1 and index_log2
  • I have created 2 users named user1 and user2
  • The objective is user1 should be able to use Kibana to add index_log1 and view all data in that index
  • Similarly, user2 should be able to use Kibana to add index_log2 and view all data in that index.
  • Both the users should not be able to see other’s index. The index should not be visible in the Settings tab nor in the Discover tab
    I tried various roles but either the user will not be able to see anything or they will still see the index visible in Kibana but cannot see the data. But I want to even hide the Index from visible to that user.

I am not able to proceed. Please assist.

–

You received this message because you are subscribed to the Google Groups “Search Guard” group.

To unsubscribe from this group and stop receiving emails from it, send an email to search-guard+unsubscribe@googlegroups.com.

To post to this group, send email to search-guard@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/search-guard/182a9fd2-42d3-4095-b003-ac8c0036bffb%40googlegroups.com.

For more options, visit https://groups.google.com/d/optout.

3

Hi Sonny,

Hope you are doing well!!

Do you have any update regarding the ‘SG 2.4 with Elastic Search 2.4.1 and Kibana 4.6’

Thanks & Regards,

Shree Shurthi N.

···

On Friday, October 28, 2016 at 5:47:31 PM UTC+5:30, Sonny L wrote:

Hello Team,

I am using SG 2.4 with Elastic Search 2.4.1 and Kibana 4.6

I have read the past topics but couldn’t find any solution.

Let me explain my scenario:

  • We have 2 servers sending logs to Elasticsearch.
  • Hence we have 2 indices named index_log1 and index_log2
  • I have created 2 users named user1 and user2
  • The objective is user1 should be able to use Kibana to add index_log1 and view all data in that index
  • Similarly, user2 should be able to use Kibana to add index_log2 and view all data in that index.
  • Both the users should not be able to see other’s index. The index should not be visible in the Settings tab nor in the Discover tab
    I tried various roles but either the user will not be able to see anything or they will still see the index visible in Kibana but cannot see the data. But I want to even hide the Index from visible to that user.

I am not able to proceed. Please assist.