Allow different users into ES with kibana? about elasticsearch-readonlyrest-plugin HOT 8 CLOSED

Sorry for the delayed response, I've been super busy this week.

About the configuration exception, you need to wrap the wildcard strings in double quotes (sorry, crappy docs kills again).

e.g.

actions: ["cluster:*", "indices:data/read/*"]

Tell me how it goes! 👍

from elasticsearch-readonlyrest-plugin.

@sscarduzio hello.my config is like this.

name: dev (read only, but can create dashboards)
type: allow
kibana_access: ro+
actions: ["cluster:", "indices:data/read/"]
auth_key: dev:dev

if i append 'actions: ["cluster:", "indices:data/read/"]', i can not login with user dev. why?

from elasticsearch-readonlyrest-plugin.

you forgot the star! it's "cluster:*" not "cluster:", and the same for indices:data/read/

from elasticsearch-readonlyrest-plugin.

@sscarduzio Actually,my config is ["cluster:*", "indices:data/read/*"],but the view without "*",because of the editor.
And i have another question, when i started a logstash instance(output is the elasticsearch), it occurred an auth exception. What should i do with this? should i add user and password in the logstash config too?

from elasticsearch-readonlyrest-plugin.

About Logstash HTTP auth

https://www.elastic.co/guide/en/shield/current/logstash.html#ls-http-auth-basic

About the conf problem

Not sure what you wanted to do with the actions rule, but this should work for a kibana admin and a logstash reader.

readonlyrest:
    enable: true
    response_if_req_forbidden: Sorry, your request is forbidden.
    access_control_rules:

    - name: RW Kibana
      type: allow 
      kibana_access: rw
      auth_key: admin:passwd3

  - name: dev (read only, but can create dashboards) for logstash indices
    type: allow 
    kibana_access: ro+
    auth_key: dev:dev
    indices:[".kibana*", "logstash*", "default"]

from elasticsearch-readonlyrest-plugin.

BTW good point about logstash, I added to the README example 2

from elasticsearch-readonlyrest-plugin.

Question 1:
when i append ["cluster:*", "indices:data/read/*"]in my elasticsearch.xml, i can not login with the appiont user.

Question 2:
user => "logstash" password => "logstash"
when i append the config in my logstash output, it still shows [401] <h1>Forbidden</h1>.

you should debug by yourself first.

from elasticsearch-readonlyrest-plugin.

Please see the updated, tested example 2. It needs the latest plugin version 1.9.3 (see download link in the README.md as well).

IMPORTANT: read again the instruction, I included a note to this bug which was making my Kibana go in a code 401 loop:
elastic/kibana#2814

from elasticsearch-readonlyrest-plugin.