# Disable writes over http

**URL:** <https://discuss.elastic.co/t/disable-writes-over-http/19885>\
**Category:** Elasticsearch\
**Created:** [September 19, 2014, 3:41pm UTC](https://discuss.elastic.co/t/disable-writes-over-http/19885 "2014-09-19T15:41:21Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Marie\_Jacob](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marie_jacob/32/1038_2.png) [@Marie\_Jacob](https://discuss.elastic.co/u/Marie_Jacob)\
**Post date:** [September 19, 2014, 3:41pm UTC](https://discuss.elastic.co/t/disable-writes-over-http/19885/1 "2014-09-19T15:41:21Z")

</div>

I'm sure that this has been asked before on the forum, but I couldn't find  
an answer specifically for this one:

Is there any way at all to disable writes over http for elasticsearch? It's  
very easy for people to accidentally create indexes that they didn't mean  
to create.  
If there is no way, I think this would be a GREAT option to add (something  
like http.writes\_enabled?) ... it seems to be the most basic access control  
that would be useful for many use cases.

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/5c472d3f-6fe6-40b7-afcf-366430a953d6%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/5c472d3f-6fe6-40b7-afcf-366430a953d6%40googlegroups.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [September 19, 2014, 9:14pm UTC](https://discuss.elastic.co/t/disable-writes-over-http/19885/2 "2014-09-19T21:14:14Z")

</div>

You can disable http entirely, that's it

> **[Elasticsearch Platform — Find real-time answers at scale](https://www.elastic.co)**
>
> Power insights and outcomes with the Elasticsearch Platform and AI. See into your data and find answers that matter with enterprise solutions designed to help you build, observe, and protect. Try Elasticsearch free today.

Regards,  
Mark Walkom

Infrastructure Engineer  
Campaign Monitor  
email: [markw@campaignmonitor.com](mailto:markw@campaignmonitor.com)  
web: [www.campaignmonitor.com](http://www.campaignmonitor.com)

On 20 September 2014 01:41, Marie Jacob [jacob.marie@gmail.com](mailto:jacob.marie@gmail.com) wrote:

> I'm sure that this has been asked before on the forum, but I couldn't find  
> an answer specifically for this one:
> 
> Is there any way at all to disable writes over http for elasticsearch?  
> It's very easy for people to accidentally create indexes that they didn't  
> mean to create.  
> If there is no way, I think this would be a GREAT option to add (something  
> like http.writes\_enabled?) ... it seems to be the most basic access control  
> that would be useful for many use cases.
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/5c472d3f-6fe6-40b7-afcf-366430a953d6%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/5c472d3f-6fe6-40b7-afcf-366430a953d6%40googlegroups.com)  
> [https://groups.google.com/d/msgid/elasticsearch/5c472d3f-6fe6-40b7-afcf-366430a953d6%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/5c472d3f-6fe6-40b7-afcf-366430a953d6%40googlegroups.com?utm_medium=email&utm_source=footer)  
> .  
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEM624YJFe%2B8Ff\_V1bzxKK%3DOE5eTBZOxsHeK%3DoodKWEBXk9ehw%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEM624YJFe%2B8Ff_V1bzxKK%3DOE5eTBZOxsHeK%3DoodKWEBXk9ehw%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![jprante](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/jprante/32/44941_2.png) [@jprante](https://discuss.elastic.co/u/jprante)\
**Post date:** [September 19, 2014, 10:07pm UTC](https://discuss.elastic.co/t/disable-writes-over-http/19885/3 "2014-09-19T22:07:57Z")

</div>

You can filter out HTTP PUT (and DELETE) and get a pretty good approach to  
not accidentally remove or overwrite anything (due to REST semantics)

Jörg

On Fri, Sep 19, 2014 at 5:41 PM, Marie Jacob [jacob.marie@gmail.com](mailto:jacob.marie@gmail.com) wrote:

> I'm sure that this has been asked before on the forum, but I couldn't find  
> an answer specifically for this one:
> 
> Is there any way at all to disable writes over http for elasticsearch?  
> It's very easy for people to accidentally create indexes that they didn't  
> mean to create.  
> If there is no way, I think this would be a GREAT option to add (something  
> like http.writes\_enabled?) ... it seems to be the most basic access control  
> that would be useful for many use cases.
> 
> --  
> You received this message because you are subscribed to the Google Groups  
> "elasticsearch" group.  
> To unsubscribe from this group and stop receiving emails from it, send an  
> email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
> To view this discussion on the web visit  
> [https://groups.google.com/d/msgid/elasticsearch/5c472d3f-6fe6-40b7-afcf-366430a953d6%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/5c472d3f-6fe6-40b7-afcf-366430a953d6%40googlegroups.com)  
> [https://groups.google.com/d/msgid/elasticsearch/5c472d3f-6fe6-40b7-afcf-366430a953d6%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/5c472d3f-6fe6-40b7-afcf-366430a953d6%40googlegroups.com?utm_medium=email&utm_source=footer)  
> .  
> For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

--  
You received this message because you are subscribed to the Google Groups "elasticsearch" group.  
To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com).  
To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAKdsXoHO-26RspwnTYAaFAUA6T12EhjGG39JJtsKTWsT%2BA3a6g%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAKdsXoHO-26RspwnTYAaFAUA6T12EhjGG39JJtsKTWsT%2BA3a6g%40mail.gmail.com).  
For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout).

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:00am UTC](https://discuss.elastic.co/t/disable-writes-over-http/19885/4 "2017-07-06T01:00:58Z")

</div>

Closed on July 6, 2017, 1:00am UTC


