Can i make elastic search read only? or to accept only GET methods?


(nicolas melendez) #1

Hi there,
i want to add data to elastic search and then make it read only. can
it be possible?
maybe only accep GET method or maybe somewhere there is a flag or
something?

Thanks a lot!


(Mohit Chawla) #2

Hi,

On Sun, Apr 22, 2012 at 6:37 AM, nicolas melendez nfmelendez@gmail.com wrote:

Hi there,
i want to add data to elastic search and then make it read only. can
it be possible?
maybe only accep GET method or maybe somewhere there is a flag or
something?

See the index.blocks.read_only setting here :
http://www.elasticsearch.org/guide/reference/api/admin-indices-update-settings.html


(nicolas melendez) #3

index.blocks.read_only can be useful to present elastic search as a public
data read only service?
i want to use it for an open government initiative in Buenos Aires and i
like very much the raw elastic search rest service.
Thanks

On Sun, Apr 22, 2012 at 1:26 AM, Mohit Chawla <mohit.chawla.binary@gmail.com

wrote:

Hi,

On Sun, Apr 22, 2012 at 6:37 AM, nicolas melendez nfmelendez@gmail.com
wrote:

Hi there,
i want to add data to elastic search and then make it read only. can
it be possible?
maybe only accep GET method or maybe somewhere there is a flag or
something?

See the index.blocks.read_only setting here :

http://www.elasticsearch.org/guide/reference/api/admin-indices-update-settings.html

--
NM
Nicolás Meléndez
blog.melendez.com.ar http://blog.melendez.com.ar

"People over processes"
"Working Software over documentation"
"Responding to change over following a plan"

Cell: +54 9 1157535454
Twitter: @nfmelendez
Skype: nfmelendez

*Personal Site *
http://www.melendez.com.ar


(Igor Motov) #4

I think it's not a good idea. Theoretically, it's possible to turn off
dynamic script execution and prohibit all requests except GET search
requests using filtering reverse proxy or elasticsearch-jetty plugin.
However, you are still exposing yourself to possible denial of service
attacks. Elasticsearch provides extremely powerful query mechanism, which
also allows creation of long-running queries that consume a lot of memory
if you have an index of non-trivial size. I think you would want to have
full control over the types of queries that users are allowed to send to
elasticsearch.

On Sunday, April 22, 2012 7:39:42 AM UTC-4, nicolas melendez wrote:

index.blocks.read_only can be useful to present elastic search as a
public data read only service?
i want to use it for an open government initiative in Buenos Aires and i
like very much the raw elastic search rest service.
Thanks

On Sun, Apr 22, 2012 at 1:26 AM, Mohit Chawla <
mohit.chawla.binary@gmail.com> wrote:

Hi,

On Sun, Apr 22, 2012 at 6:37 AM, nicolas melendez nfmelendez@gmail.com
wrote:

Hi there,
i want to add data to elastic search and then make it read only. can
it be possible?
maybe only accep GET method or maybe somewhere there is a flag or
something?

See the index.blocks.read_only setting here :

http://www.elasticsearch.org/guide/reference/api/admin-indices-update-settings.html

--
NM
Nicolás Meléndez
blog.melendez.com.ar http://blog.melendez.com.ar

"People over processes"
"Working Software over documentation"
"Responding to change over following a plan"

Cell: +54 9 1157535454
Twitter: @nfmelendez
Skype: nfmelendez

*Personal Site *
http://www.melendez.com.ar


(system) #5