Extracting data without saved _source

Elastic Stack Elasticsearch
1

Say I need to index documents containing sensitive information, which I would only like to search by, but not return in search results. I learned that I can disable the _source in index, so that nothing in document is returned back, but still can be searched for.

Now, the question is, in terms of data storage, can any indexed information be reverse-engineered and restored from data files, if any person with malicious intentions had direct access to those files?

Thanks in advance.

2

Yes. A tool like Luke will be able to read the indexed values I think.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.