A solution for secure use of Kibana and Elasticsearch in multi-user environment
Wataru Takase, Tomoaki Nakamura, Yoshiyuki Watase, Takashi Sasaki

TL;DR
This paper presents a flexible, secure multi-user solution for Kibana and Elasticsearch, integrating user/group access control, Kerberos authentication, and Kibana plugins, enhancing data security and sharing capabilities.
Contribution
It introduces a novel, adaptable approach for user/group-based access control in Kibana and Elasticsearch, surpassing previous homemade plugins.
Findings
The solution effectively enforces data access restrictions in CC-IN2P3.
Integration with Search Guard maintains performance levels.
The approach is applicable to various environments beyond cloud services.
Abstract
Monitoring is indispensable to check status, activities, or resource usage of IT services. A combination of Kibana and Elasticsearch is used for monitoring in many places such as KEK, CC-IN2P3, CERN, and also non-HEP communities. Kibana provides a web interface for rich visualization, and Elasticsearch is a scalable distributed search engine. However, these tools do not support authentication and authorization features by default. In the case of single Kibana and Elasticsearch services shared among many users, any user who can access Kibana can retrieve other's information from Elasticsearch. In multi-user environment, in order to protect own data from others or share part of data among a group, fine-grained access control is necessary. The CERN cloud service group had provided cloud utilization dashboard to each user by Elasticsearch and Kibana. They had deployed a homemade…
Peer Reviews
No public reviews on file for this paper yet. If you reviewed it on a platform where reviews are public (OpenReview, ICLR, NeurIPS, ICML), you can paste yours below so the community can read it here.
Videos
No videos yet. Explain this paper in a talk, walkthrough, or lecture? Add one.
Taxonomy
TopicsAdvanced Data Storage Technologies · Caching and Content Delivery · Distributed and Parallel Computing Systems
