# How to confirm CORS is enabled - Elasticsearch 5.x

**URL:** <https://discuss.elastic.co/t/how-to-confirm-cors-is-enabled-elasticsearch-5-x/64155>\
**Category:** Elasticsearch\
**Created:** [October 27, 2016, 2:08pm UTC](https://discuss.elastic.co/t/how-to-confirm-cors-is-enabled-elasticsearch-5-x/64155 "2016-10-27T14:08:43Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![somerandomguy](https://avatars.discourse-cdn.com/v4/letter/s/e19b73/32.png) [@somerandomguy](https://discuss.elastic.co/u/somerandomguy)\
**Post date:** [October 27, 2016, 2:08pm UTC](https://discuss.elastic.co/t/how-to-confirm-cors-is-enabled-elasticsearch-5-x/64155/1 "2016-10-27T14:08:43Z")

</div>

Hi.  
Have installed ES 5.0 with everything else.  
I have put the following in the /etc/elasticsearch/elasticsearch.yml:

http.cors.enabled : true  
http.cors.allow-origin : "\*"  
http.cors.allow-methods : OPTIONS, HEAD, GET, POST, PUT, DELETE  
http.cors.allow-headers : X-Requested-With,X-Auth-Token,Content-Type, Content-Length

But when I point my current Elasticsearch-Head to this newly installed ES I am unable to connect. Anything else that needs to get set?

TIA.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [October 28, 2016, 12:48am UTC](https://discuss.elastic.co/t/how-to-confirm-cors-is-enabled-elasticsearch-5-x/64155/2 "2016-10-28T00:48:32Z")

</div>

I don't think head is compatible with 5.0, is it?

You can see CORS settings here - [https://www.elastic.co/guide/en/elasticsearch/reference/5.0/modules-http.html#\_settings\_2](https://www.elastic.co/guide/en/elasticsearch/reference/5.0/modules-http.html#_settings_2) - but otherwise you may want to ask the author of head 🙂

---

<div class="post-metadata">

**Author:** ![somerandomguy](https://avatars.discourse-cdn.com/v4/letter/s/e19b73/32.png) [@somerandomguy](https://discuss.elastic.co/u/somerandomguy)\
**Post date:** [October 28, 2016, 2:21am UTC](https://discuss.elastic.co/t/how-to-confirm-cors-is-enabled-elasticsearch-5-x/64155/3 "2016-10-28T02:21:19Z")

</div>

Hi, thanks.  
I believe that you can run HEAD as a standalone and point it to your ES Cluster and this is what I have done but I get nothing. Is there anyway to tell that my CORS is enabled and working?

---

<div class="post-metadata">

**Author:** ![ytzlax](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/ytzlax/32/34754_2.png) [@ytzlax](https://discuss.elastic.co/u/ytzlax)\
**Post date:** [November 4, 2016, 4:29am UTC](https://discuss.elastic.co/t/how-to-confirm-cors-is-enabled-elasticsearch-5-x/64155/4 "2016-11-04T04:29:32Z")

</div>

@somerandomguy, I have the same problem, do you have solution?

Thanks

---

<div class="post-metadata">

**Author:** ![somerandomguy](https://avatars.discourse-cdn.com/v4/letter/s/e19b73/32.png) [@somerandomguy](https://discuss.elastic.co/u/somerandomguy)\
**Post date:** [November 5, 2016, 8:25am UTC](https://discuss.elastic.co/t/how-to-confirm-cors-is-enabled-elasticsearch-5-x/64155/5 "2016-11-05T08:25:15Z")

</div>

Hi Yep.  
I had an old version of Head on my other cluster.  
I removed it and then re-installed and now I can hit this url and all good 🙂

http://old\_cluster\_that\_I\_installed\_head:9200/\_plugin/head/index.html?base\_uri=http://my\_new\_server\_that\_doesnt'\_have\_head\_installed:9200

🙂

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 5, 2017, 10:06pm UTC](https://discuss.elastic.co/t/how-to-confirm-cors-is-enabled-elasticsearch-5-x/64155/6 "2017-07-05T22:06:22Z")

</div>