Need help with creating/mapping different indexes for groups of servers

I have 3 different teams and i need to give each team permission to only access the logs of the servers they own by putting them into groups and giving those groups access to kibana. I am assuming the way to go is to have each groups logs indexed separately then give access to the indexed logs. I have already set up xpack.

  1. Is that the way to go, are there alternatives?
  2. How do i go about accomplishing it. Will be happy for examples or suggestions.

Hi @snipervelli

You can use Kibana Spaces to create separate environments for your team members and assign to each space a role configured to allow access to a specific group of indices or to a single index with a document level security configured.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.