Version: 6.x-22

Enterprise Modules

Search Guard ships with all enterise modules already installed. If you upgrade from one Search Guard versin to another, the latest version of all enterprise modules will be installed automatically.

Upgrading Enterprise Modules manually

If you want to upgrade an enterprise module manually, download the respective module jar file from Maven. When downloading, choose “jar with dependencies” and place it in the folder

  • <ES installation directory>/plugins/search-guard-6

After that, delete the older version of the module and restart your nodes for the changes to take effect.

Active Directory and LDAP Authentication/Authorisation:

All versions on maven central

https://github.com/floragunncom/search-guard-authbackend-ldap

Active Directory and LDAP documentation

Kerberos/SPNEGO Authentication/Authorisation:

All versions on maven central

https://github.com/floragunncom/search-guard-auth-http-kerberos

Kerberos/SPNEGO documentation

JWT Authentication/Authorisation:

All versions on maven central

https://github.com/floragunncom/search-guard-authbackend-jwt

JSON Web token documentation

Document- and field level security:

All versions on maven central

https://github.com/floragunncom/search-guard-module-dlsfls

Document and field level security documentation

Audit logging:

All versions on maven central

https://github.com/floragunncom/search-guard-module-auditlog

Audit Logging documentation

REST management API:

All versions on maven central

https://github.com/floragunncom/search-guard-rest-api

REST management API documentation

Kibana multi tenancy module:

All versions on maven central

https://github.com/floragunncom/search-guard-module-kibana-multitenancy

Kibana Multitenancy documentation

Removing Enterprise Modules

If you want to deploy only the features you actually plan to use, you can remove the Enterprise jar files for all other features from your Search Guard installation.

The jar files can be found in the folder

  • <ES installation directory>/plugins/search-guard-6

The enterprise modules start with dlic-search-guard*, for example

dlic-search-guard-authbackend-ldap-6.2.3-8.jar 

To disable a module, remove the respective jar file from the search-guard-6 directory and restart the node.