--> with the anchor tag "#" it isn't possible to block the access via Nginx.
For example only the administrators (with specific IP) should be able to access the Dev Tools via the
Kibana Web Interface. But with our NGINX Config, we're only able to block the locations like
.../app/canvas without the #
this is not possible. The fragment part of the URL (#/dev_tools/console) is handled clientside and not via the server, meaning you cannot blog of parts that are just int he fragment of the URL.
Currently Discover, Visualize, Dashboard, Managament, Dev Tools are all part of the "Kibana" application and thus the routing between those will happen clientside.
There is nothing you can currently do to solve your issue (unless using x-pack which you already mentioned) or wait since we're most likely splitting up those apps into individual apps in the future (no dates or versions yet for that), once we're changing to the new platform, that is currently developed in Kibana.
Apache, Apache Lucene, Apache Hadoop, Hadoop, HDFS and the yellow elephant
logo are trademarks of the
Apache Software Foundation
in the United States and/or other countries.