4 ms·
Elasticsearch has nothing to fix - the product does precisely what the config tells it to. Maintainers of various distros ES packages are largely responsible fo
by clipradiowallet 5y ago
Elasticsearch has nothing to fix - the product does precisely what the config tells it to. Maintainers of various distros ES packages are largely responsible for any [mis]configuration there.
If you'd like to read how you can secure ES, go do that: https://www.elastic.co/what-is/open-x-pack https://www.elastic.co/what-is/open-x-pack
PS: x-pack is the piece that adds authorization/authentication to ES.
- altdataseller 5y agoYou can setup username and pass auth in newer versions of Elastic without paying for xpack (I think at version 6 or up?)
- clipradiowallet 5y agoX-pack is free now, they don't make you license it anymore. I wasn't aware of how to setup username/pass without it though (other than something like an nginx proxy in front of 9200/tcp with basic auth)