# Can we override the way data gets stored in elasticsearch
**URL:** https://discuss.elastic.co/t/can-we-override-the-way-data-gets-stored-in-elasticsearch/257106
**Category:** Elasticsearch
**Created:** [November 30, 2020, 5:33pm UTC](https://discuss.elastic.co/t/can-we-override-the-way-data-gets-stored-in-elasticsearch/257106 "2020-11-30T17:33:27Z")
**Posts on this page:** 6
**Page:** 1
### Author:  [@Vivek\_Sagar](https://discuss.elastic.co/u/Vivek_Sagar)
#### Post date: [November 30, 2020, 5:33pm UTC](https://discuss.elastic.co/t/can-we-override-the-way-data-gets-stored-in-elasticsearch/257106/1 "2020-11-30T17:33:27Z")
Is there a way to override how the data is stored in elasticsearch? I want to encrypt the data just before elasticsearch writes it to file system and just before sending the search query to file-system send the encrypted value. Is there any extension point which can be overridden? Can I override any of the Lucene processor which does this?
Objective is to store encrypted data.
---
### Author:  [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)
#### Post date: [November 30, 2020, 5:48pm UTC](https://discuss.elastic.co/t/can-we-override-the-way-data-gets-stored-in-elasticsearch/257106/2 "2020-11-30T17:48:27Z")
Yes, no need to adjust anything in Elasticsearch or Lucene however, the recommended extension point for encrypting data on disk is the device mapper. In other words, use [`dm-crypt`](https://en.wikipedia.org/wiki/Dm-crypt).
---
### Author:  [@Vivek\_Sagar](https://discuss.elastic.co/u/Vivek_Sagar)
#### Post date: [November 30, 2020, 6:03pm UTC](https://discuss.elastic.co/t/can-we-override-the-way-data-gets-stored-in-elasticsearch/257106/3 "2020-11-30T18:03:54Z")
Thanks David, but as you said, when using dm-crypt, data is encrypted on disk. Someone who is accessing the VM can still get the data. Is it possible to make sure the data is encrypted at OS level?
---
### Author:  [@DavidTurner](https://discuss.elastic.co/u/DavidTurner)
#### Post date: [November 30, 2020, 6:16pm UTC](https://discuss.elastic.co/t/can-we-override-the-way-data-gets-stored-in-elasticsearch/257106/4 "2020-11-30T18:16:31Z")
> [@Vivek\_Sagar](#):
>
> Someone who is accessing the VM can still get the data.
If someone can access the VM they can extract the data (or the encryption keys) from Elasticsearch directly, no matter whether the encryption happens within Elasticsearch or within the device mapper.
---
### Author:  [@Vivek\_Sagar](https://discuss.elastic.co/u/Vivek_Sagar)
#### Post date: [November 30, 2020, 7:27pm UTC](https://discuss.elastic.co/t/can-we-override-the-way-data-gets-stored-in-elasticsearch/257106/5 "2020-11-30T19:27:20Z")
I did not think that way. You are right David. 😃
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 28, 2020, 7:27pm UTC](https://discuss.elastic.co/t/can-we-override-the-way-data-gets-stored-in-elasticsearch/257106/6 "2020-12-28T19:27:25Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.