The sg_frontend_multi_tenancy.yml given as an example in /usr/share/elasticsearch/plugins/search-guard-flx/sgconfig/sg_frontend_multi_tenancy.yml
is wrong.
It’s:
default:
enabled: true
index: .kibana
server_user: kibanaserver
But it should be:
enabled: true
index: .kibana
server_user: kibanaserver