Hello,
We have 3 ES clusters 7.1 running in a remote-cluster setup. All works well, except generating reports from Kibana on a remote index e.g. *:remoteindex-*
. The user has the kibana_user
and reporting_user
roles, trying to generate a report returns:
"statusCode":403,"response":"{\"error\":{\"root_cause\":[{\"type\":\"security_exception\",\"reason\":\"action [cluster:monitor/state] is unauthorized for user [some_user]\"}],\"type\":\"security_exception\",\"reason\":\"action [cluster:monitor/state] is unauthorized for user [some_user]\"},\"status\":403}"}
I couldn't find a monitor/state
built-in role. Generating reports for local indices works fine.