I’m trying to set up several filtering rules for the same index, but only the first one works. Here is an example configuration
- name: First_rule
proxy_auth:
users: ["*"]
ldap_authorization:
name: "ldap1"
groups: ["ldap_group1"]
indices: [ "index1-*", "index2-*"]
actions: ["indices:data/read/*"]
filter: '{"prefix": {"description": {"value": "description1"} } }'
- name: Second_rule
proxy_auth:
users: ["*"]
ldap_authorization:
name: "ldap1"
groups: ["ldap_group1"]
indices: [ "index1-*", "index2-*"]
actions: ["indices:data/read/*"]
filter: '{"prefix": {"description": {"value": "desсription2"} } }'
When I search by index pattern index1-* in Kibana Discover tab, I get only documents with a field equal to description=description1
Is it possible for these two rules to apply?
Summary
This text will be hidden