Comments (14)
Found my issue : When creating a markdown widget, Kibana tries to query the default index (kibana settings) even if no data is returned !
The workaround we used is to create an empty index, defined as default in kibana that every user can read.
Thanks for your help !
from elasticsearch-readonlyrest-plugin.
Hello @dcoueron, I just released the new build and updated the documentation with the new link.
By the way, please share your experience using this plugin! What's good, what should be better, what new features you'd like to see and so on.
Enjoy!
from elasticsearch-readonlyrest-plugin.
Thanks for the quick release!
What I want to do is to allow readonly access through Kibana to my users but not for all indices.
I did not manage to do that, is it possible ?
I tried this:
- name: Kibana access + some indices
type: allow
kibana_access: ro
indices: [my_index]
auth_key: user:passwd
from elasticsearch-readonlyrest-plugin.
Sorry I can't give you a tested solution for this as I'm travelling right now, I'm not even sure what goes wrong, but for now I'd try using the wildcard indices:
- name Kibana access + some indices
type: allow
kibana_access: ro
indices: [my_index, .kibana*]
auth_key: user:passwd
[edit: fixed fucked up email quoting that prevented the snippet from showing]
from elasticsearch-readonlyrest-plugin.
any success with this @dcoueron?
from elasticsearch-readonlyrest-plugin.
Sorry, I'm not in office this week :-)
I'll get back to you as soon as I have a chance to try it.
Le mer. 13 avr. 2016 10:41, Simone Scarduzio [email protected] a
écrit :
any success with this @dcoueron https://github.com/dcoueron?
—
You are receiving this because you were mentioned.
Reply to this email directly or view it on GitHub
#45 (comment)
from elasticsearch-readonlyrest-plugin.
Hello @sscarduzio
It seems to work but not when my Kibana Dashboard includes some markdown widgets. It's strange because such widgets don't query any data from kibana
from elasticsearch-readonlyrest-plugin.
@dcoueron BTW, you can get a lot of info from the logs: when the plugin blocks a request, it logs all the request context (including the action field). If you see something that should pass and is blocked send it to me and I can include it in the Kibana passthrough rule.
from elasticsearch-readonlyrest-plugin.
Hi, In which log should I look ? Is there some kind of log level to set somewhere ?
from elasticsearch-readonlyrest-plugin.
Set the whole ES to debug mode, you can grep for "{ action: "
Example:
[2016-04-21 11:28:28,427][DEBUG][plugin.readonlyrest.acl.blocks.rules.impl] KIBANA ACCESS DENIED { action: indices:admin/create OA:/0:0:0:0:0:0:0:1:65503 M: PUT}
from elasticsearch-readonlyrest-plugin.
If you want to see all the request contexts (not only the blocked ones) put ES in trace mode and the grep is the same.
from elasticsearch-readonlyrest-plugin.
@dcoueron wait, the default index = ".kibana" ? as opposed to what index? (supper happy you figured it out btw!)
from elasticsearch-readonlyrest-plugin.
.kibana is the "internal" index used by kibana to store its data. By "default index" I mean the index that will be searched by default when a user opens kibana.
from elasticsearch-readonlyrest-plugin.
@dcoueron are you all right with this? can we close this issue?
BTW: I'd like your opinion on a new feature I was thinking of adding: how about I let the users (optionally) write two javascript call backs: i.e. onRequest
and onResponse
where people can write custom business logic to accept/reject requests according to action, indices, method, etc. or even modify the request/response body, add/remove headers on the fly?
What do you think? :)
from elasticsearch-readonlyrest-plugin.
Related Issues (20)
- Does this work on ES 7.10.0? HOT 2
- Support for certificates in PEM format, in addition to keystore format HOT 3
- despite force_load_from_file=true, ROR plugin tries to load .readonlyrest index HOT 2
- Kibana Short url creation not recognised on Kibana 7.8.1 HOT 4
- When user access a forbidden resource, the user cannot access to kibana dashboards in 7.5.1 HOT 3
- Can't Update Kibana to 7.12.0 with ROR enabled HOT 6
- Curator can't create backup with ROR enabled HOT 7
- 请问配置更新有api吗? HOT 3
- Potential security issue HOT 7
- elasticsearch7.15.1 安装后启动报错
- Why are 403 response codes sent while ROR plugin isn't initiated? HOT 5
- No Tag in Github for Version v1.39.0-pre4_es7.17.3 HOT 4
- Indices rule not working for data stream ES 7.17 HOT 11
- How configure in docker compose with this plugin HOT 3
- Unable to make field private static final java.util.Map
- kibana_access is not working (_bulk_resolve are blocked) HOT 12
- Error while installing ror plugin inside docker container HOT 2
- Unable to connect to LDAP server HOT 2
- Can't able to authenticate with LDAP HOT 14
- Kibana ::1:<port> ECONNREFUSED HOT 15
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from elasticsearch-readonlyrest-plugin.