4 ms·
> Elasticsearch Yea. I found that surprising when it came time to use ElasticSearch for my own purposes. If you want security, you need to setup something betw
by pyre 10y ago
> Elasticsearch
Yea. I found that surprising when it came time to use ElasticSearch for my own purposes. If you want security, you need to setup something between the ElasticSearch server and the clients to moderate.
- jrgnsd 10y agoSetting up nginx to proxy to Elasticsearch with HTTP auth on top is fairly trivial. There's a couple of good articles on the web if you google for it. Also, should you have an Elasticsearch support contract, you get access to the Shield plugin which has extensive access control. But yes, the fact that it is open OOTB is frustrating.
- pyre 10y agoThis is exactly what I do, but the fact that it's wide open and relies on you to use a different (and de-coupled) service for permissions was surprising to me (at the time).