Stack Overflow
Stack Overflow

Questions tagged [elasticsearch-shield]

Shield is the security layer in Elasticsearch

Shield installs as a plugin in Elasticsearch.

An Elasticsearch cluster benefits from properly implemented security with Shield in the following ways:

  • Role-based access control at the index level and LDAP authentication integration to prevent unauthorized access

  • Encryption to preserve the integrity of your data, keeping confidential data confidential.

  • An Audit trail to analyze access patterns.

33 questions
1
vote
2 answers

Elasticsearch ShieldPlugin ClassNotFoundException

I'm trying to use shield plugin with elasticsearch while creating a es client in spring. I have added the following dependency to my…
user2260808
  • 37
  • 5
1
vote
1 answer

elasticsearch authentication with java api client

I have an authentication issue using elasticsearch (2.3) with shield. The elasticsearch instance is hosted somewhere on a cloud and I don't have much access for tweaking. I am using the Sense chrome-plugin to make test requests and just before…
dcg
  • 1,144
  • 1
  • 22
  • 38
1
vote
0 answers

Logstash Isn't Authenticating With Elasticsearch Shield

I'm having issues authenticating Logstash with Shield. Logs aren't getting through to Elasticsearch, and I have discovered in the Elasticsearch log files that all the requests are being denied by shield due to incorrect authentication. The following…
x3nr0s
  • 1,946
  • 4
  • 26
  • 46
1
vote
0 answers

Elasticsearch + Shield, security_exception happens when Document Level Security is enabled

I've installed and set up Shield plugin for Elasticsearch 2.2.0. Then I added an admin user via the esusers realm. It all seems to work, I can authenticate and make queries, but when I try to enable some Document Level Security, it keeps giving this…
Miklos
  • 102
  • 2
  • 8
1
vote
0 answers

Elasticsearch Security Approach Precedents

I mean this question as a discussion. I'm looking for some rationale to pick the approach to use to authenticate access and encrypt traffic to and from our elasticsearch cluster on aws. I've come across 3 methods: NGINX on every node - to manage…
Navneet
  • 9,590
  • 11
  • 34
  • 51
1
vote
0 answers

alternative jdbc-river and shield

My goal is that I have admin rights on kibana 4. I wish I could edit the content and save dashboard, etc... and to share its with others users. But I don't want the others users should be able to save my dashboard or to remove its, etc... Only that…
d0lur1g
  • 43
  • 4
1
vote
0 answers

ElasticSearch admin user is unauthorized to access jdbc river plugin

Within ElasticSearch, I configured jdbc river plugin, it works before, after configured shield and assigned with admin user, the ElasticSearch is secured and able to access by TransportClient, but when I run river plugin script, I got the following…
Sui
  • 21
  • 2
0
votes
0 answers

Cannot Get JARs from Maven for ElasticSearch Shield Plugin

I'm not able to get maven to pull this dependencies. org.elasticsearch.plugin shield 2.4.1 The only 2 files that are in the folder…
juminoz
  • 3,168
  • 7
  • 35
  • 52
0
votes
1 answer

Kibana not working after removing shield plugin

I've been testing out the Shield plugin for elasticsearch and kibana to provide security. I installed the kibana plugin and quickly realized that I can't use it until I set up SSL stuff. For nowI would like to use the basic browser authentication…
Sofistication
  • 38
  • 4
0
votes
0 answers

How to create custom plugin for LDAP in elasticsearch

Tools used : 1. Elasticsearch 2.1 with Shield 2.1 2. DgLux as a front end report generation tool 3. Company LDAP to authenticate user against groups I'm trying to create a custom plugin which should use LDAP only for authorization. Authentication…
Ravi Yadav
  • 13
  • 1
  • 7
0
votes
1 answer

Upgrading Elasticsearch 2.1.1 to 2.2.0 - missing authentication token?

I decided to try upgrade the current cluster from ES2.1.1 to ES2.2.0. A mirror pair. The cluster is running within AWS, so I'm using the cloud-aws plugin for communication. I successfully upgraded the first node, and it has assumed master status,…
Kareem
  • 534
  • 1
  • 6
  • 17
0
votes
0 answers

Elasticsearch: Disabling Shield After License Expiration (Safely)

I started using the Shield plugin for security, but then moved to a NGINX reverse proxy. I now have both Shield and NGINX running, but my Shield license expired. How do I turn off Shield without interrupting the cluster (2 nodes)? I tried…
speedplane
  • 15,673
  • 16
  • 86
  • 138
0
votes
0 answers

Elasticsearch Shield throws CreationException

I'm trying to set up a running service which uses Elasticsearch with Shield. However when I try to start the service I get the following error: org.springframework.beans.factory.BeanCreationException: Could not autowire field: private…
TheShahin
  • 153
  • 1
  • 12
0
votes
0 answers

Failed to parse role mappings file - Elastic Search shield

Getting this exception: Failed to parse role mappings file [C:\abc\ShieldConfig\shield\role_mapping.yml]. skipping/removing all mappings... java.security.AccessControlException: access denied("java.io.FilePermission"…
Ydouwant2know
  • 29
  • 1
  • 8
0
votes
1 answer

Active Directory AuthorizationException in elastic search

I am trying to use AD authentication. I am able to login successfully but i am not authorized to perform any query in marvel. Everytime i execute query in marvel, i get the following error.Below are the details { "error":…
Shivang MIttal
  • 990
  • 1
  • 14
  • 36
1
2
3