Disabling DELETE API

Read from the below linked post from 2014 that the DELETE method cannot be disabled in Elastic Search.

Like to confirm if this is still so currently?

If so, is there any official documentation which states this in writing?


No, there's no docs that list all the things that Elasticsearch doesn't yet do :wink:

Blocking individual HTTP methods would be unhelpful as each method, including the DELETE method, is used for many things. For instance, the clear scroll API uses a DELETE request to release resources used by a long-running scroll search. Also you can bypass such a filter by using a transport client instead of a HTTP client.

If you want to restrict certain actions, the best way is to use security as this is much more fine-grained and cannot be bypassed by using an alternative client.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.