# Kibana sharing security question

**URL:** <https://discuss.elastic.co/t/kibana-sharing-security-question/50417>\
**Category:** Kibana\
**Created:** [May 19, 2016, 9:30am UTC](https://discuss.elastic.co/t/kibana-sharing-security-question/50417 "2016-05-19T09:30:16Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![jeremyr](https://avatars.discourse-cdn.com/v4/letter/j/df705f/32.png) [@jeremyr](https://discuss.elastic.co/u/jeremyr)\
**Post date:** [May 19, 2016, 9:30am UTC](https://discuss.elastic.co/t/kibana-sharing-security-question/50417/1 "2016-05-19T09:30:17Z")

</div>

Hi All,

I have successfully embedded the iframe from the Kibana sharing option into a 3rd party application.

However, when I open Chrome develloper tools, I can see the elasticsearch query with data post and request that was made.

> Request URL:https://_[url.kibana.com](http://url.kibana.com)_/elasticsearch/\_msearch?timeout=0&ignore\_unavailable=true&preference=1463648533777  
> Request Method:POST

> Request Payload :

> {"index":"test","search\_type":"count","ignore\_unavailable":true}  
> {"query":{"filtered":{"query":{"query\_string":{"analyze\_wildcard":true,"query":"place\_id:MS000843"}},"filter":{"bool":{"must":[{"range":{"date\_ymd":{"gte":1461057992178,"lte":1463649992178,"format":"epoch\_millis"}}}],"must\_not":}}}},"size":0,"aggs":{}}

My question: Is there a way to avoid the client to update the query to prevent it see no other information in the same index?

Thanks for your help

J.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 19, 2016, 1:03pm UTC](https://discuss.elastic.co/t/kibana-sharing-security-question/50417/2 "2016-05-19T13:03:09Z")

</div>

You don't want the query to be shown in the developer tools?

---

<div class="post-metadata">

**Author:** ![jeremyr](https://avatars.discourse-cdn.com/v4/letter/j/df705f/32.png) [@jeremyr](https://discuss.elastic.co/u/jeremyr)\
**Post date:** [May 19, 2016, 1:20pm UTC](https://discuss.elastic.co/t/kibana-sharing-security-question/50417/3 "2016-05-19T13:20:03Z")

</div>

I would like to know, if there a way to hide the Request payload between kibana and elastic search to avoid that clients changes the queries sent to ES.

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 23, 2016, 3:52am UTC](https://discuss.elastic.co/t/kibana-sharing-security-question/50417/4 "2016-05-23T03:52:13Z")

</div>

There is not.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [July 6, 2017, 1:52pm UTC](https://discuss.elastic.co/t/kibana-sharing-security-question/50417/5 "2017-07-06T13:52:38Z")

</div>