Kibana Client Talk to ES Directly?


(Yongtao You) #1

Hi,

Does Kibana client (the part that runs inside my browser) ever send queries directly to ES? Or it always go through Kibana server? I'm trying to decide if I need to expose ES endpoint to all my Kibana users or just the Kibana endpoint is enough.

Thanks.
Yongtao


(Magnus B├Ąck) #2

Does Kibana client (the part that runs inside my browser) ever send queries directly to ES?

No.

Or it always go through Kibana server?

Yes.

(The above is true for Kibana 4 and later.)


(Joe Fleming) #3

To be clear, every request from the browser does go through the Kibana server, but if you look at the requests, you'll see they are all prefixed with /elasticsearch. The Kibana server proxies the request to elasticsearch (preserving your user session if you are using Shield/Security).

This was mostly done to avoid CORS issues, but we also do a very small amount of query protection as well, like stopping DELETE requests, for example.


(Yongtao You) #4

Thank you both!


(system) #5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.