Search Guard FLX Documentation
Welcome to Search Guard FLX, the enterprise security and alerting suite for Elasticsearch!
Quick Start with Docker
Get started with Search Guard in seconds using Docker:
docker run -it --rm -p 5601:5601 -p 9200:9200 floragunncom/search-guard-flx-demo
Once the container is running, point your browser to http://localhost:5601 and login with:
- Username:
admin - Password:
admin
You now have a fully functional Elasticsearch cluster with Kibana and Search Guard FLX installed!
What Are You Most Interested In?
Search Guard FLX provides comprehensive enterprise features for Elasticsearch. Choose the area you’d like to explore:
Security
Protect your Elasticsearch cluster with enterprise-grade security features including authentication, authorization, role-based access control, field and document level security, and audit logging. Search Guard supports LDAP, Active Directory, SAML, OpenID Connect, Kerberos, JWT, and many other authentication methods.
Alerting
Monitor your data and get notified when something important happens. Create watches that continuously check your data using powerful queries and trigger actions like sending emails, Slack messages, PagerDuty alerts, or webhooks when conditions are met.
Index Management
Automate index lifecycle management with scheduled policies. Define transitions, rollover strategies, snapshots, and retention policies to automatically manage your indices as they age - from hot to warm to cold storage, and eventually deletion.
Encryption at Rest
Encrypt your Elasticsearch indices at rest to meet compliance requirements and protect sensitive data. Search Guard encrypts data transparently at the storage layer, ensuring your data is secure even if physical media is compromised.
Anomaly Detection
Automatically detect anomalies and outliers in your time-series data using machine learning. Identify unusual patterns, deviations, and trends without manual threshold configuration, helping you spot issues before they become critical.
Additional Resources
- Demo Installer - Quick test installation for your local system
- Using sgctl - Command-line administration tool
- Configuration Variables - Secure credential management
- Migrating from Search Guard 53 - Migration guide
- Release Notes - Latest changes and updates
Feedback
Your feedback is welcome! Visit the Search Guard Forum for questions and discussions, or report issues at the Search Guard Gitlab repository.
