rashidkpc / kibana2

Kibana was acquired by Elastic in 2013. See elastic/kibana. More info at http://kibana.org
Other
1.19k stars 245 forks source link

kibana-ruby-auth: Own tags show "no events matched" #393

Open tomcsanyid opened 11 years ago

tomcsanyid commented 11 years ago

Hi, I am currently testing the kibana-ruby-auth branch, and I like it because its features are exactly the ones I am looking for, however there is one thing I can't figure out: I created some tags on my own which are in use by LogStash and are applied to some of my logs. If I am logged in as administrator user and search for @tags="mytag" then I see the results perfectly as expected. So I proceeded and created a user that has only one tag allowed (mytag), but when I log in as that user I see "no events matched" even when I select "all time" at the search bar. But if I choose to add the "default tag" of LogStash (_grokparsefailure) to the user's allowed tags suddenly the events with the tag _grokparsefailure appear in my search list, even if I search for @tags="mytag" I see all the messages tagged with only _grokparsefailure.

I looked into the code a little bit, but couldn't really figured out the problem. Also had a look at the requests Kibana makes to ElasticSearch but they seemed to be identical to me.

Thank you for your help.