lookingcloudy

Kibana Readonly

With this tip, kibana can't be modified. So you can share the uri to anyone on the internet. It's a network method to protect kibana from changes of anonymous.

Quick start

You need to have a working kibana exposed over http on internet
On the same elasticsearch server, install nginx : apt-get install nginx
In the directory /etc/nginx/sites-available, create a new file and edit it, for example : vi /etc/nginx/sites-available/kibana-readonly
Write the following configuration :

	###
	Module dependencies
	###
	require.paths.unshift "#{__dirname}/lib/support/express-csrf/"
	require.paths.unshift "#{__dirname}/lib/support/node_hash/lib/"

	express = require 'express'
	app = module.exports = express.createServer()

	RedisStore = require 'connect-redis'

	for t in `git tag`
	do
	git push origin :$t
	git tag -d $t
	done

	##
	## Use-case: Host in a remote git (on a ssh-able host) both pillars and states on Salt Stack 0.17.x
	##
	## See thread: https://groups.google.com/forum/#!topic/salt-users/bOz2cdY-pnY
	#
	# Salt stack master and minion procedure, short version:
	#
	# - On the Master:
	#
	# wget -O - http://bootstrap.saltstack.org \| sudo sh -s -- -M git v0.17.0

	# Description
	# Drop a link into chat which will work as a skype conference call for the requested user
	#
	# Dependencies:
	# "slack-node": "^0.0.95"
	# "hubot-slack-attachment": "^1.0.0"
	#
	# Configuration:
	# HUBOT_SLACK_TOKEN
	# HUBOT_SLACK_INCOMING_WEBHOOK