ReadOnly Rest with KIBI

Ganzzz · March 21, 2017, 2:57am

Hi All,

I am very new to Read only rest. Can you advise me if it is ok to use readonlyrest and KIBI together ?.
I am yet to read more in detail, but your answer will help me to choose the solution.

Thanks Much
Gan

sscarduzio · March 22, 2017, 12:05am

I didn’t test with Kibi, but @nitram4 did in the past. Should be all right.

github.com/sscarduzio/elasticsearch-readonlyrest-plugin

Support of Kibi

opened 04:48PM - 24 Oct 16 UTC

closed 08:11AM - 02 Nov 16 UTC

nitram4

Im investigating support for Kibi (for of Kibana used for relational analysis). … I have successfully started Kibi (has own plugin for ES) together with readonlyplugin. Kibi saves its data to .kibi index, so I wanted to reuse the capability of controlling Kibi the same way as Kibana. My configuation is like this: ``` name: Full Admin (now for Kibi) - access outside Kibana type: allow kibana_access: rw kibana_index: .kibi auth_key: kibiadmin:XXXXXXXX ``` Error message is: ``` [2016-10-24 18:25:01,460][DEBUG][plugin.readonlyrest.acl.blocks.rules.impl] Login as: kibiadmin rc: { action: indices:data/read/coordinate-search, OA:10.xx.xx.xx, indices:[.kibi], M:POST, P:/.kibi/dashboard/_coordinate_search, C:{"query":{"match_all":{}}} [2016-10-24 18:25:01,460][DEBUG][plugin.readonlyrest.acl.blocks.rules.impl] KIBANA ACCESS DENIED { action: indices:data/read/coordinate-search, OA:10.xx.xxx.xx, indices:[.kibi], M:POST, P:/.kibi/dashboardgroup/_coordinate_search, C:{"query":{"match_all":{}}} ``` What is strange for me is, that I see there is another option indices:data/read/coordinate-search which is new to Kibi and its not working even when Im not limiting Action. When the rules are simple like this ``` - name: Full Admin (now for Kibi) - access outside Kibana type: allow auth_key: kibiadmin:XXXXX ``` it works. Any clues? Thanks

Ganzzz · March 23, 2017, 5:37am

Thanks for the link.
I am getting an error as " Cannot read property ‘root’ of
undefined " when I use the config mentioned in the link to connect kibi to Elastic
search. Am I missing something here ?
Thanks

sscarduzio · March 23, 2017, 9:59am

that looks like a javascript error, more useful would be to see if there is some “forbidden” requests on the ES side.