Questions tagged [opensearch-security-plugin]

14 questions
3
votes
1 answer

How to use secure configuration of dockerized OpenSearch?

I have a dedicated server with running OpenSearch in Docker. I'm using example configuration without dashboard: version: '3' services: opensearch-node1: # This is also the hostname of the container within the Docker network (i.e.…
3
votes
0 answers

Error in connecting python client "Exception during establishing a SSL connection: io.netty.handler.ssl.NotSslRecordException: not an SSL/TLS record"

I am trying to get a python ElasticSearch client to connect to a local OpenSearch server that is running via docker. Am unable to connect and keep getting opensearch-node1 |…
mlablablab
  • 220
  • 2
  • 9
2
votes
1 answer

OpenSearch Installation | securityadmin.sh | UnavailableShardsException[[.opendistro_security][0] primary shard is not active Timeout

We installed OpenSearch on 4 VMs(1 coordinating node, 1 master node and 2 data nodes) and according to documentation https://opensearch.org/docs/latest/opensearch/cluster/ when we login to OpenSearch URL or via curl, we are getting following…
1
vote
0 answers

Embed Dashboards Kibana with Security

I want to embed my dashboards made in Kibana in a webpage. However, I have security enabled in Elastic and Kibana, so to open a dashboard it requires the Kibana login. There is any way I can auto-sign-in users to see Kibana dashboards in the…
1
vote
0 answers

opensearch blocked by: [SERVICE_UNAVAILABLE/1/state not recovered / initialized]

I'm trying to setup an opensearch cluster on kubernetes. when settings my nodes nothing fails but I get an error at a certain point and this is my stateful set: apiVersion: apps/v1 kind: StatefulSet metadata: name: {{ .Values.global.name }} -->…
1
vote
1 answer

Having issue start up opensearch stack(docker-compose file)

I am trying to stand up a opensearch cluster by using the example from the opensearch webstite https://opensearch.org/docs/latest/opensearch/install/docker/ version: '3' services: opensearch-node1: image: opensearchproject/opensearch:1.2.3 …
0
votes
0 answers

In opensearch while I use point in time pagination method, I was unable to get more than 10000 hits why?

I use 2.6 version with "point_in_time_full_access" have allowed actions as "manage_point_in_time". I was able to create PIT but while search I was unable to give size more than 10000. I was expecting to get hits more than 10K
0
votes
0 answers

What permissions are needed for user to create Tenant in Opensearch?

I am trying to create an internal user in Opensearch who can create and delete Tenant I want to know what permissions I need to assign to internal user to create/delete tenant. I tried giving all_access but I don't want to assign all the access to…
0
votes
0 answers

How to upload data to OpenSearch Dashboard

We have OpenSearch and OpenSearch Dashboard installed in Linux machine. Now, we have a data set in excel or csv format, how to upload this data to create visualizations? Please suggest if there any other way to upload or correct if this approach to…
0
votes
0 answers

SAML with Open Search (AWS) giving error "Error while validating SAML response in __PATH__"

After integration SAML (Keycloak) with AWS OpenSearch, getting error: Error while validating SAML response in __PATH__ Roles are mapped as well. Error Logs and Audit Logs are enabled in CloudWatch but not showing anything other than this.
0
votes
1 answer

No permission for custom backend role in Opensearch dashboard (kibana)

I have opensearch running and keycloak as oidc provider and I get this 403 error after login to opensearch: {"statusCode":403,"error":"Forbidden","message":"no permissions for [indices:data/read/search] and User [name=demo.demo,…
0
votes
0 answers

How to add hash the whole content of an event in Logstash for OpenSearch?

the problem is the following: I'm investigating how to add some anti-tampering protection to events stored in OpenSearch that are parsed and sent there by Logstash. Info is composed of application logs collected from several hosts. The idea is to…
0
votes
1 answer

How to use PKI Authentication to use the Opensearch Dashboards API?

I am trying to use OpenSearch Dashboards API (Amazon Kibana fork) to add a search index. I am using version 1.0 and have also setup the security plugin. I have no issues using TLS PKI for interacting with OpenSearch (Elasticsearch). However,…
-1
votes
0 answers

Cannot change/remove admin user in OpenSearch

I am trying to configure security in an OpenSearch. Firstly I successfully enabling an HTTPS. This activates an admin:admin user. Now I am trying to disable such user and enable my own test_user:test_pass with admin access. I replaced…
Dr.ZIG
  • 1
  • 6