Hello, I want grant my new user read only privilege on all indices except one. I don't understand how I can write the query in KQL (I don't use Lucene) : [image] Is it possible ? How ?

Ok, it seems I can use Lucene regexp in this field. So I found the solution : /prefix-@&~(prefix-kube-system-@)/.

Index privilege syntax : all indices except one

mattkime (Matthew Kime) February 27, 2020, 3:29pm 4

I hope this is helpful -

Topic		Replies	Views
Exclude indices from role? Elasticsearch	4	1650	March 5, 2017
Index privileges Elasticsearch elastic-stack-security	5	4890	March 9, 2017
Exclude indices from Elastic Search role Kibana elastic-stack-security	4	2589	September 8, 2020
Read- only access to index Kibana	6	7526	July 6, 2017
How to prevent access to specific indexes? Elasticsearch elastic-stack-security	3	2316	July 6, 2017

Elasticsearch is a trademark of Elasticsearch BV, registered in the U.S. and in other countries
Trademarks
Terms
Privacy
Brand
Code of Conduct

Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant logo are trademarks of the Apache Software Foundation in the United States and/or other countries.

Index privilege syntax : all indices except one

Related topics