21 research outputs found
A solution for secure use of Kibana and Elasticsearch in multi-user environment
Monitoring is indispensable to check status, activities, or resource usage of
IT services. A combination of Kibana and Elasticsearch is used for monitoring
in many places such as KEK, CC-IN2P3, CERN, and also non-HEP communities.
Kibana provides a web interface for rich visualization, and Elasticsearch is a
scalable distributed search engine. However, these tools do not support
authentication and authorization features by default. In the case of single
Kibana and Elasticsearch services shared among many users, any user who can
access Kibana can retrieve other's information from Elasticsearch. In
multi-user environment, in order to protect own data from others or share part
of data among a group, fine-grained access control is necessary.
The CERN cloud service group had provided cloud utilization dashboard to each
user by Elasticsearch and Kibana. They had deployed a homemade Elasticsearch
plugin to restrict data access based on a user authenticated by the CERN Single
Sign On system. It enabled each user to have a separated Kibana dashboard for
cloud usage, and the user could not access to other's one. Based on the
solution, we propose an alternative one which enables user/group based
Elasticsearch access control and Kibana objects separation. It is more flexible
and can be applied to not only the cloud service but also the other various
situations. We confirmed our solution works fine in CC-IN2P3. Moreover, a
pre-production platform for CC-IN2P3 has been under construction.
We will describe our solution for the secure use of Kibana and Elasticsearch
including integration of Kerberos authentication, development of a Kibana
plugin which allows Kibana objects to be separated based on user/group, and
contribution to Search Guard which is an Elasticsearch plugin enabling
user/group based access control. We will also describe the effect on
performance from using Search Guard.Comment: International Symposium on Grids and Clouds 2017 (ISGC 2017
Evaluation of intrathoracic tracheal narrowing in patients with obstructive ventilatory impairment using dynamic chest radiography: A preliminary study.
Purpose:Dynamic chest radiography (DCR) can observe the dynamic structure of the chest using continuous pulse fluoroscopy irradiation. However, its usefulness remains largely undetermined. The purpose of this study was to examine the relationship between changes in tracheal diameter during deep breathing and obstructive ventilation disorders using DCR.Method:Twelve participants with obstructive ventilatory impairment and 28 with normal pulmonary function underwent DCR during one cycle of deep inspiration and expiration. Three evaluators blinded to pulmonary function test results independently measured lateral diameters of the trachea in DCR images to determine whether there was a difference in the amount of change in tracheal diameter depending on the presence or absence of pulmonary dysfunction. Tracheal narrowing was defined as a decrease in the lateral tracheal diameter of more than 30 %. Participants were divided into a narrowing group and a non-narrowing group, and it was examined whether each group correlated with values of pulmonary function tests.Results:Tracheal diameter was significantly narrowed in subjects with obstructive ventilatory impairment compared to normal subjects (P < 0.01). When subjects were divided into narrowing (tracheal narrowing rate [TNr] = 41.5 ± 7.7 %, n = 9) and non-narrowing groups (TNr = 9.1 ± 7.0 %, n = 31, p < 0.01), FEV1%-G, and %V25 were significantly smaller in the narrowing group than in the non-narrowing group (p < 0.01).Conclusions:Changes in tracheal diameter during deep breathing were easily evaluated using DCR. DCR may, therefore, be useful for evaluating obstructive ventilation disorders
For the Atlas Japan collaboration, International
KSK-ALPA co. ltd. For data analysis of large-scale experiments such as LHC Atlas and other Japanese high energy and nuclear physics projects, we have constructed a Grid test bed at ICEPP and KEK. These institutes are connected to national scientific gigabit network backbone called SuperSINET. In our test bed, we have installed NorduGrid middleware based on Globus, and connected 120TB HPSS at KEK as a large scale data store. Atlas simulation data at ICEPP has been transferred and accessed using SuperSINET. We have tested various performances and characteristics of HPSS through this high speed WAN. The measurement includes data access perforance comparison between connections with low latency LAN and long distant WAN