# Get list of IPs/hosts querying elasticsearch

**URL:** https://discuss.elastic.co/t/get-list-of-ips-hosts-querying-elasticsearch/27539
**Category:** Elasticsearch
**Created:** [August 17, 2015, 9:00pm UTC](https://discuss.elastic.co/t/get-list-of-ips-hosts-querying-elasticsearch/27539 "2015-08-17T21:00:19Z")
**Posts on this page:** 3
**Page:** 1

<div class="post-metadata">

### Author: ![spynxo](https://avatars.discourse-cdn.com/v4/letter/s/b77776/32.png) [@spynxo](https://discuss.elastic.co/u/spynxo)
#### Post date: [August 17, 2015, 9:00pm UTC](https://discuss.elastic.co/t/get-list-of-ips-hosts-querying-elasticsearch/27539/1 "2015-08-17T21:00:20Z")

</div>

I would just like to get a list of all IPs/hosts currently querying elasticsearch. What would be the best way of getting this information? Would this be possible?

Thanks!

---

<div class="post-metadata">

### Author: ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [August 17, 2015, 9:15pm UTC](https://discuss.elastic.co/t/get-list-of-ips-hosts-querying-elasticsearch/27539/2 "2015-08-17T21:15:27Z")

</div>

You either need to use Shield with audit indexing, or install some other proxy (nginx/apache) in front.  
ES does not capture this data natively.

---

<div class="post-metadata">

### Author: ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)
#### Post date: [July 5, 2017, 11:55pm UTC](https://discuss.elastic.co/t/get-list-of-ips-hosts-querying-elasticsearch/27539/3 "2017-07-05T23:55:27Z")

</div>