Kibana role with time based Index privileges

Is there a way to limit a user when he/she can run a query using date math?
For example user a can only see query result from now-1d to now?

You can limit the query to a specific interval, but you have to use a defined interval for the Document Level Security settings, so it won't be able to filter "now-1d to now", but you can set it to: "documents newer than May 16th, 2021" using the timestamp.

1 Like

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.