search guard features

elasticsearch rbac abac

Decoding RBAC and ABAC: A Detailed Comparison

Jochen Kressin || 2023-07-12

RBAC and ABAC are two popular approaches for managing access privileges. In this article, we delve into the concepts behind each approach, highlight their similarities and differences, and explore how Search Guard enables the implementation of ...

elasticsearch index pattern username

Helpful Hint: Username substitution in index patterns

Jochen Kressin || 2023-06-22

We explaine how to use variable substitution in index patterns to create dynamic roles that incorporate user attributes

Blog-Image-SearchGuard-SearchGuardFLX TechnicalPreview

Security for Elasticsearch and OpenSearch: Better Than Ever

Nils Bandener || 2022-03-08

In the past few months, we have been busy working on the next generation of Search Guard. Right now, we are very close to the actual general availability release.

Kibana Multi Tenancy Explained

Kibana Multi-Tenancy Explained

Cliff Staley || 2020-11-24

How does Kibana Multi Tenancy work? How can I create and assigns tenants? And how is a tenant different from a Search Guard role?

assign elasticserach roles by ip

Helpful Hint: Assign roles based on IPs or hostnames

Jochen Kressin || 2020-11-19

How to dynamically assign Search Guard roles based on the IP address or the hostname of the caller.

elasticsearch exclude permissions

Exclude Elasticsearch permissions from Search Guard roles

Jochen Kressin || 2020-11-18

How to combine including and excluding Elasticsearch permissions for Search Guard roles to create flexible and dynamic access controls.

elasticsearch document level security

Elasticsearch Document-Level Security

Jochen Kressin || 2020-10-13

How to use Document-level Security to control access to documents in an Elasticsearch index based on a users role.

elasticsearch ldap authentication 2

LDAP authentication and authorisation, part 2: Configuring Search Guard

jkressin || 2019-07-03

How to configure LDAP or Active Directory for Elasticsearch user authentication and authorization by using the Search Guard security plugin.

Log ingestion with Beats, Logstash and Search Guard

Paulo Melo || 2019-03-20

How to configure Search Guard with Elasticsearch log analytics tools like Beats and logstash to protect log data in your cluster.

Elasticsearch client certificate authentication

Cliff Stayley || 2019-02-06

How to use TLS client certificate authentication with Elasticsearch by using Search Guard, the enterprise security suite for Elasticsearch.

elasticsearch ldap 1

LDAP authentication and authorisation, part 1: OpenLDAP setup

Cliff Stayley || 2019-01-28

This article describes how to set up OpenLDAP for Elasticsearch authentication and authorisation in combination with Search Guard.

Using Kerberos with Elasticsearch and Kibana

Cliff Stayley || 2019-01-16

How to setup Kerberos authentication for Elasticsearch and Kibana by using Search Guard, the enterprise security suite for Elasticsearch.

elasticsearch field anonymisation

Field anonymization

Cliff Staley || 2018-12-21

How to use Search Guard to anonymise sensitive data in your Elasticsearch cluster on the fly without any modifcations at ingest time.

elasticsearch security custom modules

Custom authentication modules

Jochen Kressin || 2018-12-11

This article demonstrates how to implement custom authentication and authorization modules for Search Guard to secure your Elasticsearch cluster.

elasticsearch security first steps

First steps - Set up users and roles

Jochen Kressin || 2018-10-21

This article explains the Search Guard request flow and provides step-by-step instruction to add new users, roles and permissions.

kibana multi tenancy

Kibana Multi Tenancy with Search Guard

Jochen Kressin || 2018-10-08

Search Guard provides Kibana multi tenancy, which makes it possible to separate Dashboards and Visualizations on a per-role basis.

elasticsearch monitoring searchguard

Using X-Pack Monitoring with Search Guard

Cliff Staley || 2018-10-01

Search Guard comes with predefined roles that make it easy to use X-Pack Monitoring, Alerting and Machine Learning with Elasticsearch.

saml elasticsearch kibana

Using SAML for Kibana Single Sign On

Jochen Kressin || 2018-08-16

Search Guard fully supports for SAML, so you can use your favorite identity provider like Keycloak, Okta or Auth0 to implement easy Kibana Single Sign-On.

elasticsearch user impersonation

User Impersonation: Submit requests on behalf of another user

Cliff Staley || 2018-08-08

The best way to assure security rules work as desired, is to test the configuration. The Search Guard User Impersonation feature that makes testing easy.

read history elasticsearch

Read History: Monitoring document access for GDPR compliance

Jochen Kressin || 2018-05-30

The Search Guard Read History makes it possible to track access to PII data in your Elasticsearch cluster and helps to stay compliant with the informational rights of customers under GDPR.

elasticsearch write history gdpr

Write History: Monitoring document changes for GDPR compliance

Jochen Kressin || 2018-04-21

GDPR requires you to provide a lot of information about the storage and usage of personal data upon request. Use the Search Guard Write History to track the lifetime of PII documents in your cluster and to stay compliant with GDPR regulatio ...

elasticsearch immutable indices

How Immutable Indices help you to stay GDPR compliant

Jochen Kressin || 2018-04-16

Once a document has been written to an Immutable Index, Search Guard makes sure it cannot be changed afterwards. This write-once approach ensures data integrity and helps you to meet compliance regulations like GDPR, SOX, PCI or ISO ...

tls tool search guard

Generating production-ready certificates with the TLS tool

Cliff Staley || 2018-02-25

Generate TLS certificates for Elasticsearch, Kibana and Logstash with the Search Guard offline TLS generator. Production-ready certificates at the click of a button.

Elasticserach compliance preview

Search Guard Compliance Features – Technical Preview

Jochen Kressin || 2018-01-24

Search Guard provides security for Elasticsearch and Kibana. The compliance edition helps you stay compliant with GDPR, HIPAA, ISO or SOX.

Search Guard configuration ui

What’s new in Search Guard 6: The configuration GUI

Jochen Kressin || 2018-01-22

The Kibana configuration UI for Search Guard provides an easy way to manage users, roles and permissions.

Search Guard 6 has arrived

Search Guard 6 is coming!

Claudia Kressin || 2017-08-21

Search Guard 6 will arrive soon with a whole bunch of new features that help you keeping Elasticsearch and Kibana secure.

Meeting Elasticsearch compliance regulations

Meeting compliance regulations with Search Guard audit logging

Jochen Kressin || 2017-06-09

Search Guard provides a sound, bullet-proof, and flexible Audit Log module that enables you to record any activity in your cluster, find anomalies, and, most importantly, take action.

Sign up for Search Guard Newsletter

Thank you for signing up to our newsletter!

Processing

© 2025 floragunn GmbH - All Rights Reserved

Search Guard is a trademark of floragunn GmbH, registered in the U.S. and in other countries. Elasticsearch, Kibana, Logstash, and Beats are trademarks of Elasticsearch BV, registered in the U.S. and in other countries. Apache and Apache Lucene are trademarks of the Apache Software Foundation in the United States and/or other countries.