# User unable to view streaming logs in Kibana

**URL:** <https://forum.search-guard.com/t/user-unable-to-view-streaming-logs-in-kibana/1915>\
**Category:** Search Guard\
**Created:** [August 5, 2020, 5:19pm UTC](https://forum.search-guard.com/t/user-unable-to-view-streaming-logs-in-kibana/1915 "2020-08-05T17:19:25Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Doug\_Renze](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/doug_renze/32/720_2.png) [@Doug\_Renze](https://forum.search-guard.com/u/Doug_Renze)\
**Post date:** [August 5, 2020, 5:19pm UTC](https://forum.search-guard.com/t/user-unable-to-view-streaming-logs-in-kibana/1915/1 "2020-08-05T17:19:26Z")

</div>

# TL;DR

Member of `SGS_KIBANA_USER` and `SGS_READALL` unable to view **Logs** under **Observability** section in Kibana.

# Implementation Details

- **Elasticsearch/Kibana:** 7.8.0
- **Search Guard (ES & Kibana):** 43.0.0

# Issues

I have a user with `SGS_KIBANA_USER` and `SGS_READALL` roles who is attempting to view streaming logs under the **Observability-\>Logs** in Kibana. She has access to the indices she’s attempting to view and can view them in **Discover** , but cannot view **any** logs in the streaming view.

I can view the streaming logs using the same configuration she’s attempting to use. But then, I have `SGS_ALL_ACCESS`, so I would expect to be able to.

I assume this is a permissions issue. What permissions do I need to grant in order to allow her to use this feature, short of granting admin permissions?

---

<div class="post-metadata">

**Author:** ![srgbnd](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/srgbnd/32/506_2.png) [@srgbnd](https://forum.search-guard.com/u/srgbnd)\
**Post date:** [August 6, 2020, 10:07am UTC](https://forum.search-guard.com/t/user-unable-to-view-streaming-logs-in-kibana/1915/2 "2020-08-06T10:07:36Z")

</div>

> I assume this is a permissions issue. What permissions do I need to grant in order to allow her to use this feature, short of granting admin permissions?

If there is a permission issue, you should see the related error in the Elasticsearch log. Do you see any errors there?

---

<div class="post-metadata">

**Author:** ![Doug\_Renze](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/doug_renze/32/720_2.png) [@Doug\_Renze](https://forum.search-guard.com/u/Doug_Renze)\
**Post date:** [August 6, 2020, 5:32pm UTC](https://forum.search-guard.com/t/user-unable-to-view-streaming-logs-in-kibana/1915/3 "2020-08-06T17:32:08Z")

</div>

> [@srgbnd](#):
>
> If there is a permission issue, you should see the related error in the Elasticsearch log. Do you see any errors there?

I haven’t been able to connect with the user yet and will post logs as soon as I’m able to.

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [August 27, 2020, 5:32pm UTC](https://forum.search-guard.com/t/user-unable-to-view-streaming-logs-in-kibana/1915/4 "2020-08-27T17:32:09Z")

</div>

Closed on August 27, 2020, 5:32pm UTC

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.
