Hi,
I have setup elasticsearch setup with latest version 5.6.9. I have configured elasticseach-head plugin in standalone mode. For kibana authentication, we have configured readonlyrest plugin. After configuring readonlyrest plugin elasticsearch server not connected to the elasticsearch-head. I have also mention header authorization but still is not working.
elasicesearch configuration file
elasticsearch.yml
---------------------------------- Network -----------------------------------
Set the bind address to a specific IP (IPv4 or IPv6):
network.host: 0.0.0.0
http.cors.enabled: true
http.cors.allow-origin: "*"
http.cors.allow-headers: Authorization
Set a custom port for HTTP:
http.port: 9200
For more information, consult the network module documentation.
Readonlyrest.yml
readonlyrest:
response_if_req_forbidden: Forbidden by ReadonlyREST ES plugin
access_control_rules:
- name: "::LOGSTASH::"
# auth_key is good for testing, but replace it with `auth_key_sha1`!
auth_key: logstash:logstash
actions: ["cluster:monitor/main","indices:admin/types/exists","indices:data/read/*","indices:data/write/*","indices:admin/template/*","indices:admin/create"]
indices: ["logstash-*"]
# We trust Kibana's server side process, full access granted via HTTP authentication
- name: "::KIBANA-SRV::"
auth_key: kibana:kibana
verbosity: error
type: allow
logs:-
FORBIDDEN by default req={ ID:121019886-517551234#262, TYP:MainRequest, CGR:N/A, USR:[no basic auth header], BRS:true, KDX:null, ACT:cluster:monitor/main, OA:35.231.36.26, DA:10.142.0.2, IDX:<N/A>, MET:HEAD, PTH:/, CNT:<N/A>, HDR:{Content-Length=0, Content-Type=application/json, Host=35.231.36.26:9200, User-Agent=Faraday v0.13.1}, HIS:[::LOGSTASH::->[auth_key->false]], [::KIBANA-SRV::->[auth_key->false]] }