JarCasting
JarCasting JarCasting

Search Guard

Provide access control related features for Elasticsearch 5

License

License
Categories

Categories

Search Business Logic Libraries
GroupId

GroupId

com.floragunn
ArtifactId

ArtifactId

search-guard-5
Last Version

Last Version

5.6.16-19.4
Release Date

Release Date
Type

Type

jar
Description

Description

Search Guard
Provide access control related features for Elasticsearch 5
Project URL

Project URL

https://github.com/floragunncom/search-guard
Source Code Management

Source Code Management

https://github.com/floragunncom/search-guard

Download search-guard-5

Filename Size
search-guard-5-5.6.16-19.4.pom
search-guard-5-5.6.16-19.4.zip 5 MB
search-guard-5-5.6.16-19.4-tests.jar 134 KB
search-guard-5-5.6.16-19.4-sources.jar 132 KB
search-guard-5-5.6.16-19.4-sgadmin-standalone.zip 23 MB
search-guard-5-5.6.16-19.4-sgadmin-standalone.tar.gz 23 MB
search-guard-5-5.6.16-19.4-javadoc.jar 436 KB
Browse

How to add to project

<!-- https://jarcasting.com/artifacts/com.floragunn/search-guard-5/ -->
<dependency>
    <groupId>com.floragunn</groupId>
    <artifactId>search-guard-5</artifactId>
    <version>5.6.16-19.4</version>
</dependency>
// https://jarcasting.com/artifacts/com.floragunn/search-guard-5/
implementation 'com.floragunn:search-guard-5:5.6.16-19.4'
// https://jarcasting.com/artifacts/com.floragunn/search-guard-5/
implementation ("com.floragunn:search-guard-5:5.6.16-19.4")
'com.floragunn:search-guard-5:jar:5.6.16-19.4'
<dependency org="com.floragunn" name="search-guard-5" rev="5.6.16-19.4">
  <artifact name="search-guard-5" type="jar" />
</dependency>
@Grapes(
@Grab(group='com.floragunn', module='search-guard-5', version='5.6.16-19.4')
)
libraryDependencies += "com.floragunn" % "search-guard-5" % "5.6.16-19.4"
[com.floragunn/search-guard-5 "5.6.16-19.4"]

Dependencies

compile (4)

Group / Artifact Type Version
com.floragunn : search-guard-ssl jar 5.6.16-23.1
org.elasticsearch.plugin : transport-netty4-client jar 5.6.16
com.google.guava : guava jar 25.1-jre
commons-cli : commons-cli jar 1.3.1

provided (2)

Group / Artifact Type Version
org.elasticsearch : elasticsearch jar 5.6.16
org.apache.logging.log4j : log4j-core jar 2.11.1

test (7)

Group / Artifact Type Version
junit : junit jar 4.12
commons-io : commons-io jar 2.5
org.apache.httpcomponents : fluent-hc jar 4.3.4
io.netty : netty-tcnative jar 2.0.5.Final
org.elasticsearch.plugin : reindex-client jar 5.6.16
org.elasticsearch.plugin : percolator-client jar 5.6.16
com.floragunn : dlic-search-guard-test-framework jar 5.3-1

Project Modules

There are no modules declared in this project.

Search Guard

We moved from GitHub to GitLab

Please find our repositories here: https://git.floragunn.com/explore/projects

Search Guard - Security for Elasticsearch

Logo

Search Guard(®) is an Elasticsearch plugin that offers encryption, authentication, authorization. It supports authentication via Active Directory, LDAP, Kerberos, JSON web tokens, SAML, OpenID and many more. It includes fine grained role-based access control to indices, documents and fields. Enjoy true multi tenancy in Kibana, and stay compliant with GDPR, HIPAA, PCI, SOX and ISO by using audit and compliance logging.

Search Guard supports OpenSSL for maximum performance and security. The complete code is Open Source.

Community Edition

Search Guard offers all basic security features for free. The Community Edition of Search Guard can be used for all projects, including commercial projects, at absolutely no cost. The Community Edition includes:

  • Full data in transit encryption
  • Node-to-node encryption
  • Certificate revocation lists
  • Role-based cluster level access control
  • Role-based index level access control
  • User-, role- and permission management
  • Internal user database
  • HTTP basic authentication
  • PKI authentication
  • Proxy authentication
  • User Impersonation

Please see here for a feature comparison.

Enterprise and Compliance Edition

The Enterprise Edition on Search Guard adds:

  • Active Directory / LDAP
  • Kerberos / SPNEGO
  • JSON web token (JWT)
  • OpenID
  • SAML
  • Document-level security
  • Field-level security
  • Audit logging
  • Compliance logging for GDPR, HIPAA, PCI, SOX and ISO compliance
  • True Kibana multi-tenancy
  • REST management API

Please see here for a feature comparison.

If you want to use our enterprise features in production, you need to obtain a license. We offer a very flexible licensing model, based on productive clusters with an unlimited number of nodes. Non-productive systems like Development, Staging or QA are covered by the license at no additional cost.

Trial license

You can test all enterprise modules for 60 days. A trial license is automatically created when you first install Search Guard. You do not have to install the trial license manually. Just install Search Guard and you're good to go!

Documentation

Please refer to the Official documentation for detailed information on installing and configuring Search Guard.

Quick Start

<ES directory>/bin/elasticsearch-plugin install \
  -b com.floragunn:search-guard-6:6.4.0-23.0

  • cd into <ES directory>/plugins/search-guard-<version>/tools

  • Execute ./install_demo_configuration.sh, chmod the script first if necessary. This will generate all required TLS certificates and add the Search Guard configuration to your elasticsearch.yml file.

  • Start Elasticsearch

  • Test the installation by visiting https://localhost:9200. When prompted, use admin/admin as username and password. This user has full access to the cluster.

  • Display information about the currently logged in user by visiting https://localhost:9200/_searchguard/authinfo.

  • Deep dive into all Search Guard features by reading the Search Guard documentation

Config hot reloading

The Search Guard configuration is stored in a dedicated index in Elasticsearch itself. Changes to the configuration are pushed to this index via the sgadmin command line tool. This will trigger a reload of the configuration on all nodes automatically. This has several advantages over configuration via elasticsearch.yml:

  • Configuration is stored in a central place
  • No configuration files on the nodes necessary
  • Configuration changes do not require a restart
  • Configuration changes take effect immediately

Support

Legal

Search Guard is a trademark of floragunn GmbH, registered in the U.S. and in other countries.

Elasticsearch, Kibana and Logstash are trademarks of Elasticsearch BV, registered in the U.S. and in other countries.

floragunn GmbH is not affiliated with Elasticsearch BV.

Versions

Version
5.6.16-19.4
5.6.16-19.3
5.6.15-19.3
5.6.14-19.3
5.6.14-19.2
5.6.13-19.2
5.6.12-19.4
5.6.12-19.2-p1
5.6.12-19.2
5.6.10-19.4
5.6.10-19.2
5.6.10-19.1
5.6.9-19.1
5.6.9-19
5.6.8-19.1
5.6.8-19
5.6.7-19.1
5.6.7-19
5.6.6-19.1
5.6.6-18
5.6.5-19.1
5.6.5-18
5.6.5-17
5.6.4-19.1
5.6.4-18
5.6.4-17
5.6.4-16
5.6.3-19.1
5.6.3-18
5.6.3-17
5.6.3-16.1
5.6.3-16
5.6.2-19.1
5.6.2-18
5.6.2-17
5.6.2-16
5.6.0-19.1
5.6.0-18
5.6.0-17
5.6.0-16
5.5.3-16
5.5.2-16
5.5.2-15
5.5.1-16
5.5.1-15
5.5.1-14
5.5.0-16
5.5.0-15
5.5.0-14
5.4.3-16
5.4.3-15
5.4.3-14
5.4.2-15
5.4.2-14
5.4.2-13
5.4.2-12
5.4.1-15
5.4.1-14
5.4.1-13
5.4.1-12
5.4.0-15
5.4.0-14
5.4.0-13
5.4.0-12
5.3.3-15
5.3.3-14
5.3.3-13
5.3.3-12
5.3.2-15
5.3.2-12
5.3.1-15
5.3.1-12
5.3.0-15
5.3.0-12
5.3.0-11
5.2.2-15
5.2.2-12
5.2.2-11-mtbeta2
5.2.2-11
5.2.1-15
5.2.1-12
5.2.1-11
5.2.0-15
5.2.0-12
5.2.0-11
5.2.0-10
5.1.2-15
5.1.2-12
5.1.2-11
5.1.2-10
5.1.1-15
5.1.1-12
5.1.1-11
5.1.1-10
5.1.1-9-hf1
5.1.1-9
5.0.2-15
5.0.2-12
5.0.2-11
5.0.2-10
5.0.2-9
5.0.2-8
5.0.1-12
5.0.1-11
5.0.1-10
5.0.1-9
5.0.1-8
5.0.0-12
5.0.0-11
5.0.0-10
5.0.0-9
5.0.0-8