Thanks @dadoonet, I realize I can search with or without credentials, which is not right.
Upon running a search of meow/_search, it indeed return successful, and _cat/indices shows a long lists of random number ended with meow, confirm meow attack. Damn cat.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.