Access Management to Kibana production

[CP-AssafM]

Hi All,

How do you manage your user's access to Kibana in production?

I want to provide access to a user to specific customer logs (and not all the customer's logs),

We have thousands of customers logs in the same index (with field tenantID) and we want to have the option give to specific engineer access to the data of one customer when needed.

I really appreciate your help/suggestions.

Thanks in advance!

[Marius_Dragomir]

The most common way is to use document level security (it will allow access to a user role to specific documents in the index based on a query):

Document level security | Elasticsearch Guide [8.1] | Elastic