# Document Level Security not working in searchguard

**URL:** https://discuss.elastic.co/t/document-level-security-not-working-in-searchguard/63994
**Category:** Elasticsearch
**Created:** [October 26, 2016, 11:51am UTC](https://discuss.elastic.co/t/document-level-security-not-working-in-searchguard/63994 "2016-10-26T11:51:31Z")
**Posts on this page:** 4
**Page:** 1

<div class="post-metadata">

### Author: ![Aakash\_Garg](https://avatars.discourse-cdn.com/v4/letter/a/7ea924/32.png) [@Aakash\_Garg](https://discuss.elastic.co/u/Aakash_Garg)
#### Post date: [October 26, 2016, 11:51am UTC](https://discuss.elastic.co/t/document-level-security-not-working-in-searchguard/63994/1 "2016-10-26T11:51:31Z")

</div>

Hi Guys,

I am using Searchguard with Elasticsearch. Everything is working fine but when I am applying document level security in the roles it does not work.

My sg\_roles.yml config

```
sg_sample:
  indices:
    "*":
      '*':
        - indices:admin/mappings/fields/get*
        - READ
      _dls_: '{ "query" : { "match" : { "host" : { "query" : "ip", "type" : "phrase" }}}}'
      _fls_:
        - "*"

```

But my KIbana shows the results of other IPs also. Pls let me know if I am doing anything wrong. I have also followed the config from [https://floragunn.com/document-field-level-security-search-guard/](https://floragunn.com/document-field-level-security-search-guard/) but that config is giving errors .

---

<div class="post-metadata">

### Author: ![Aakash\_Garg](https://avatars.discourse-cdn.com/v4/letter/a/7ea924/32.png) [@Aakash\_Garg](https://discuss.elastic.co/u/Aakash_Garg)
#### Post date: [October 26, 2016, 12:07pm UTC](https://discuss.elastic.co/t/document-level-security-not-working-in-searchguard/63994/2 "2016-10-26T12:07:43Z")

</div>

Error logs can be seen here

> <https://github.com/floragunncom/search-guard/issues/225>

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [October 26, 2016, 12:21pm UTC](https://discuss.elastic.co/t/document-level-security-not-working-in-searchguard/63994/3 "2016-10-26T12:21:45Z")

</div>

You need to ask on the searchguard repo.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 10:09pm UTC](https://discuss.elastic.co/t/document-level-security-not-working-in-searchguard/63994/4 "2017-07-05T22:09:29Z")

</div>


