您的位置: 首页  >  技术问答  >  如何在Kibana中设置身份验证

如何在Kibana中设置身份验证

分类: 技术问答 • 2022-03-21 18:42:15

如何在Kibana中设置身份验证

问题描述：

是否可以在Kibana中启用身份验证，以将对仪表板的访问限制为仅特定用户可以访问?

Is it possible to enable authentication in Kibana in order to restrict access to a dashboard to only be accessible to particular users?

答

Kibana本身不支持身份验证或限制对仪表板的访问.

Kibana itself doesn't support authentication or restricting access to dashboards.

您可以在Kibana前面使用 nginx作为代理来限制对Kibana 4的访问，如下所述: https: //serverfault.com/a/345244 .只需将proxy_pass设置为5601端口，并在防火墙上为其他端口禁用此端口.这将完全启用或禁用Kibana.

You can restrict access to Kibana 4 using nginx as a proxy in front of Kibana as described here: https://serverfault.com/a/345244. Just set proxy_pass to port 5601 and disable this port on firewall for others. This will completly enable or disable Kibana.

Elastic还有一个名为 Shield 的工具，可用于管理Elasticsearch的安全性.例如，使用Shield，您可以允许某人以只读权限分析特定索引中的数据. https://www.elastic.co/products/shield

Elastic also has a tool called Shield which enables you to manage security of elasticsearch. With Shield you can for example allow someone to analyze data in specific indexes with read-only permissions. https://www.elastic.co/products/shield

Elastic在github上有一个问题，他们建议使用盾.

Elastic has an issue on github and they recommend to use Shield.

  1. 按照安装Shield(用于Elasticsearch的插件)这些说明
  2. 为Kibana用户配置角色
  3. 配置Kibana 可以正常工作与盾
  1. Install Shield (plugin for elasticsearch) following these instructions
  2. Configure roles for Kibana users
  3. Configure Kibana to work with Shield

Remember Shield仅提供索引级访问控制.这意味着用户A将能够看到所有仪表板，但其中某些仪表板将为空(因为他无权访问所有索引).

Remember Shield provides only index-level access control. That means user A will be able to see all dashboards but some of them will be empty (because he doesn't have access to all indices).

相关推荐