# Delete temporary storage and cookies upon session termination

**URL:** <https://discuss.elastic.co/t/delete-temporary-storage-and-cookies-upon-session-termination/300974>\
**Category:** Elastic Cloud Enterprise (ECE)\
**Created:** [March 29, 2022, 1:59pm UTC](https://discuss.elastic.co/t/delete-temporary-storage-and-cookies-upon-session-termination/300974 "2022-03-29T13:59:43Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![dkaflowitz](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@dkaflowitz](https://discuss.elastic.co/u/dkaflowitz)\
**Post date:** [March 29, 2022, 1:59pm UTC](https://discuss.elastic.co/t/delete-temporary-storage-and-cookies-upon-session-termination/300974/1 "2022-03-29T13:59:43Z")

</div>

Can Elasticsearch be configured to delete temporary storage and cookies upon session termination? If so, is it documented in anywhere?

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 29, 2022, 2:30pm UTC](https://discuss.elastic.co/t/delete-temporary-storage-and-cookies-upon-session-termination/300974/2 "2022-03-29T14:30:13Z")

</div>

Welcome!

There is no session or cookie in Elasticsearch. What do you mean?

---

<div class="post-metadata">

**Author:** ![dkaflowitz](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@dkaflowitz](https://discuss.elastic.co/u/dkaflowitz)\
**Post date:** [March 29, 2022, 2:43pm UTC](https://discuss.elastic.co/t/delete-temporary-storage-and-cookies-upon-session-termination/300974/3 "2022-03-29T14:43:39Z")

</div>

I'm afraid my lack of familiarity with the products leaves me sounding foolish. I am thinking specifically of where a user logs into Elasticsearch directly, not through Kibana. I'm working on an application security assessment for ECE and there is no "user" documentation for Elasticsearch (as opposed to admin or dev documentation). I've turned to the forum out of frustration in my search for answers.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [March 29, 2022, 3:18pm UTC](https://discuss.elastic.co/t/delete-temporary-storage-and-cookies-upon-session-termination/300974/4 "2022-03-29T15:18:44Z")

</div>

So a user does not "log in Elasticsearch" but authenticate himself for each request which is sent to the server.  
As your questions are related to ECE, I'm moving the discussion to #orchestration:cloud-enterprise 😉

---

<div class="post-metadata">

**Author:** ![dkaflowitz](https://avatars.discourse-cdn.com/v4/letter/d/a3d4f5/32.png) [@dkaflowitz](https://discuss.elastic.co/u/dkaflowitz)\
**Post date:** [March 29, 2022, 3:30pm UTC](https://discuss.elastic.co/t/delete-temporary-storage-and-cookies-upon-session-termination/300974/5 "2022-03-29T15:30:00Z")

</div>

Thanks and sorry for my lack of knowledge. I appreciate your help and recategorization.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 26, 2022, 3:30pm UTC](https://discuss.elastic.co/t/delete-temporary-storage-and-cookies-upon-session-termination/300974/6 "2022-04-26T15:30:17Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.