Oct 17 – 21, 2016
US/Pacific timezone

User/group based access control for ElasticSearch + Kibana

Oct 20, 2016, 3:45 PM
Building 50 Auditorium (LBNL)

Building 50 Auditorium


Berkeley, CA 94720
Basic IT Services Basic IT Services


Wataru Takase (High Energy Accelerator Research Organization (JP))


Kibana and ElasticSearch are used for monitoring in many places. However, by default they do not support authentication and authorization features. In the case of single Kibana and ElasticSearch services shared among many users, any user that can access Kibana can retrieve any information from ElasticSearch.

In this talk, we will report on our latest R&D experience in securing the Kibana and ElasticSearch services. We will describe a Kibana plugin that allows Kibana dashboards to be separated based on user/group. We will also describe the effect on performance from using SearchGuard, which is an ElasticSearch plugin enables user/group based access control.

Primary author

Wataru Takase (High Energy Accelerator Research Organization (JP))

Presentation materials