How to use Kibana Sense with Shield?

Elastic Stack Kibana
1

I've been using Shield for some time, and it works fine. Now I'm trying to use the Kibana Sense plugin and running into trouble with it. Lately I've been running some fairly complex curl commands, and Sense should make things easier, if only I can get it to run.

With a basic curl command, Shield requires that I define a username with the -u flag, i.e. "curl -u -XPUT 'https://hostname:9200..." But I can't figure out how to specify the username with Sense. If I'm logged in to Kibana as a disallowed user, and I define the server as https://hostname:9200, and the enter the command "PUT ", it responds "action [cluster:admin/watcher/watch/put] is unauthorized for user []".

Is there a way to define the user in Sense, or do I need to log in as whatever user I'm running the curl command as?

2

If you can connect to the index in Kibana, then you should be able to with Sense as well. They both use the same configuration. I just tried it locally and didn't have any issue with it.

Is the user you're using with Shield configured to access the index? I suspect it is, if you can use curl with the same credentials.

If I'm logged in to Kibana as a disallowed user, and I define the server as https://hostname:9200, and the enter the command "PUT ", it responds "action [cluster:admin/watcher/watch/put] is unauthorized for user ".

That's by design. You need to be logged in as a user that can read from the index you're trying to use in Sense.