Oct 17 – 21, 2016
LBNL
US/Pacific timezone

User/group based access control for ElasticSearch + Kibana

Oct 20, 2016, 3:45 PM
25m
Building 50 Auditorium (LBNL)

Building 50 Auditorium

LBNL

Berkeley, CA 94720
Basic IT Services Basic IT Services

Speaker

Wataru Takase (High Energy Accelerator Research Organization (JP))

Description

Kibana and ElasticSearch are used for monitoring in many places. However, by default they do not support authentication and authorization features. In the case of single Kibana and ElasticSearch services shared among many users, any user that can access Kibana can retrieve any information from ElasticSearch.

In this talk, we will report on our latest R&D experience in securing the Kibana and ElasticSearch services. We will describe a Kibana plugin that allows Kibana dashboards to be separated based on user/group. We will also describe the effect on performance from using SearchGuard, which is an ElasticSearch plugin enables user/group based access control.

Primary author

Wataru Takase (High Energy Accelerator Research Organization (JP))

Presentation materials