What's the best open source Kibana project for multiple tenants?
I am trying to add role based access control over Kibana to have different privileges and dashboards for different types of users and I found these projects:
- Elastic Shield Plugin
- Search Kibana Multitenancy Security Module
- Elasticearch Read only Restor
- Kibana plugin Own home
I found out that:
- Elastic Shield is the best, but unfortunately it's only a 30 days free trial.
- the intruder search module is a bit tricky and it does the job, but it is not free for commercial use, which is not suitable for my case.
- The Elasticsearch Read Only plugin allows you to determine which user is reading data, but does not allow you to determine which user is accessing this panel.
- Kibana Plugin Own Home is a workaround as it defines different kibana indexes for different users, which is not practical.
If you know of any other projects or any workarounds for the above projects that fit my requirements, I would be so grateful.
source to share
Disclaimer: I am working on floragunn, the creators of Search Guard .
The only real way to split panels and visualizations based on users / tenants is to put them in separate Kibana indexes. This is what both the Guard Guard and their own home do.
The reason for this is the way Kibana works internally: out of the box, Kibana will put all these objects into one global Kibana index that will be used by all users. Since Kibana itself has no concept of users, roles, or tenants, the only way to do this is to intercept calls to the Kibana index and rewrite the index name based on the user / role information provided.
- Search Guard does this right at the Elasticsearch level, so the dashboard tenants are split even when you access Elasticsearch directly.
- Your own home does it at the Kibana level, but the effect / result is basically the same.
- X-Pack does not have an apartment building for Kibana, so there is no dashboard separation, only access control on Elasticsearch. The same is true for ReadOnly Rest.
Another possibility is to use the Red Hat OpenShift platform. They have an Elasticsearch plugin that is integrated with Community Edition Search Guard and their own Kibana multicore module. As far as I know, this plugin is completely free.
source to share