19.0 Securing Data in Elasticsearch

Sentinel leverages Kibana, a browser-based analytics and search dashboard, which helps you to visualize events and alerts in dashboards. Sentinel stores and indexes alerts in Elasticsearch. You can configure Sentinel to also store and index events in Elasticsearch to leverage event visualization capabilities. Sentinel dashboards access data from Elasticsearch to present events and alerts in dashboards. To ensure that the dashboards display only the data that a user’s role is authorized to view and to prevent unauthorized data access in Elasticsearch, you must install the Elasticsearch Security plug-in. For more information, see Securing Data in Elasticsearch.