From acff7a8f4c529a0e18ec54389478aa48b5e54730 Mon Sep 17 00:00:00 2001 From: Court Ewing Date: Mon, 30 Nov 2015 10:32:09 -0500 Subject: [PATCH] Add field_stats to kibana user role in shield Kibana 4.3 now uses the field_stats api to pre-flight all search requests to any configured index patterns, so shield needs to allow it. Original commit: elastic/x-pack-elasticsearch@793ad01424d1a97cefa1e77ffc1f6e6c5c6c615b --- shield/config/shield/roles.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/shield/config/shield/roles.yml b/shield/config/shield/roles.yml index 5ae98201e3b..b08330e4d9f 100644 --- a/shield/config/shield/roles.yml +++ b/shield/config/shield/roles.yml @@ -32,7 +32,7 @@ kibana4: - cluster:monitor/health indices: '*': - privileges: indices:admin/mappings/fields/get, indices:admin/validate/query, indices:data/read/search, indices:data/read/msearch, indices:admin/get + privileges: indices:admin/mappings/fields/get, indices:admin/validate/query, indices:data/read/search, indices:data/read/msearch, indices:data/read/field_stats, indices:admin/get '.kibana': privileges: indices:admin/exists, indices:admin/mapping/put, indices:admin/mappings/fields/get, indices:admin/refresh, indices:admin/validate/query, indices:data/read/get, indices:data/read/mget, indices:data/read/search, indices:data/write/delete, indices:data/write/index, indices:data/write/update