topic Permission Distributed Search in Deployment Architecture

Permission Distributed Search

dalie — Mon, 04 Jun 2018 07:28:09 GMT

Hello,

Architecture:
I have a distributed Seach (not in Cluster)
1 Search head and 1 Indexer.

Every logs are stored on the indexer and with the search head user can search ....

Problem:
The problem is ... that I can allow a specific index per roles only on the indexer.
But user don't have an access to the indexer, they search via the GUI of the Search Head.

On the Search Head, I don't see the index create on the indexer, so the user have an access on every index
Is that possible to limit the access the search head ?

Thanks in advance

Re: Permission Distributed Search

adonio — Mon, 04 Jun 2018 13:52:21 GMT

place the indexes.conf on the search head as well
you are doing great by blocking the UI on the indexer

Re: Permission Distributed Search

dalie — Tue, 05 Jun 2018 07:17:25 GMT

Ok thanks I will try to do this 🙂

Re: Permission Distributed Search

dalie — Tue, 05 Jun 2018 08:23:52 GMT

It works !
One more question, every time That I will create and index on the indexer , I have to create this to the search head too then ?

Re: Permission Distributed Search

FrankVl — Tue, 05 Jun 2018 08:31:46 GMT

Yes, you would need to keep that configuration in sync.

Since you are not using clustering, in theory you could use a Deployment Server to centrally manage such configuration that needs to go to multiple systems. But setting that up just for this 1 config file might be a bit overkill.

Re: Permission Distributed Search

adonio — Tue, 05 Jun 2018 12:22:03 GMT

@dalie, if it works for you, kindly accept the answer and up-vote helpful comments
cheers