First time login failing when creating custom kibana.index

Elastic Stack Kibana
1

Hey,

I am running into a weird scenario: I am creating a custom kibana instance .kibana-user and then setting a default index pattern for that template.

I then create an account that is restricted to a specific index, has read privileges, and the kibana_user role. When I log in under that user, I cannot see any of the data in my index.

HOWEVER .. if I first log into kibana as the admin, and then login as the read only user, everything works perfectly.

Am I doing something wrong here or is this a bug?

Thanks!

2

Are you seeing any access denials in your elasticsearch logs when logging in as the regular user? You may need to tweak your audit logging to see this.