What are the fields required for Kibana to function properly

Elastic Stack Kibana
1

Hi,
i am using elasticseach search-guard 2 and I am getting this issue when launching Kibana

indices:data/read/field_stats

Error: [security_exception] no permissions for indices:data/read/field_stats
at respond (http://elk.globalreach.dev/bundles/kibana.bundle.js?v=10000:78418:16)
at checkRespForFailure (http://elk.globalreach.dev/bundles/kibana.bundle.js?v=10000:78381:8)
at http://elk.globalreach.dev/bundles/kibana.bundle.js?v=10000:76999:8
at processQueue (http://elk.globalreach.dev/bundles/commons.bundle.js?v=10000:42404:29)
at http://elk.globalreach.dev/bundles/commons.bundle.js?v=10000:42420:28
at Scope.$eval (http://elk.globalreach.dev/bundles/commons.bundle.js?v=10000:43648:29)
at Scope.$digest (http://elk.globalreach.dev/bundles/commons.bundle.js?v=10000:43459:32)
at Scope.$apply (http://elk.globalreach.dev/bundles/commons.bundle.js?v=10000:43756:25)
at done (http://elk.globalreach.dev/bundles/commons.bundle.js?v=10000:38205:48)
at completeRequest (http://elk.globalreach.dev/bundles/commons.bundle.js?v=10000:38403:8)

sg_action_groups.yml:
KIBANA_SERVER:

  • indices:admin/exists*
  • indices:admin/mapping/put*
  • indices:admin/mappings/fields/get*
  • indices:admin/refresh*
  • indices:admin/validate/query*
  • indices:data/read/get*
  • indices:data/read/mget*
  • indices:data/read/search*
  • indices:data/write/delete*
  • indices:data/write/index*
  • indices:data/write/update*
  • indices:data/read/_field_stats*
  • indices:data/read/field_stats*
  • indices:data/read/msearch*
  • indices:data/read/field_stats

KIBANA_USER:

  • indices:data/read/field_stats
  • indices:data/read/msearch*
  • indices:data/read/_field_stats*
  • indices:data/read/field_stats*
  • indices:data/read*
  • indices:admin/mappings/fields/get*
  • indices:admin/validate/query*
  • indices:admin/get*
2

You should do two things;

  1. Ask this on the Searchguard repo
  2. Provide better subjects for your question :slight_smile:
3

Thanks Mark :slight_smile:

4

hi Mark,
if I can ask you one question, what are the required fields for kibana to function properly because we are trying to set user permissions and I assumed that for example I can assign everything to admin and fewer permissions for normal user ?
many thanks
bujar