Marvel/Sense security?

Elastic Stack Elasticsearch
1

I was looking in the documentation and online for Marvel but I am not sure
how to implement security for Marvel. For example, if one were to access
example.com:9200/_plugin/marvel/sense/index.html , one would be able to put
documents through Sense on my cluster(s). I saw something about
marvel.hosts but I am not sure how to implement that.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/559eadaa-37cb-4129-8a65-38847c60126f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

2

If you have disabled access to PUT method (with Nginx for example), SENSE won't be able to PUT any document.

My 2 cents.

--
David :wink:
Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs

Le 4 janv. 2015 à 17:16, John Bohne johnbohne1@gmail.com a écrit :

I was looking in the documentation and online for Marvel but I am not sure how to implement security for Marvel. For example, if one were to access example.com:9200/_plugin/marvel/sense/index.html , one would be able to put documents through Sense on my cluster(s). I saw something about marvel.hosts but I am not sure how to implement that.

You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/559eadaa-37cb-4129-8a65-38847c60126f%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/1F5597BC-4FBE-4D24-814D-11CB6D2BC097%40pilato.fr.
For more options, visit https://groups.google.com/d/optout.

3

Why would I want to do that? I'm using Apache by the way.

I saw something about marvel.agent.exporter.es.hosts and setting up user:pwd@host:9200
but the documentation doesn't really specify where to do this. In
elasticsearch.yml? Under what heading? Would this even solve the problem?

On Sunday, January 4, 2015 12:15:23 PM UTC-6, David Pilato wrote:

If you have disabled access to PUT method (with Nginx for example), SENSE
won't be able to PUT any document.

My 2 cents.

--
David :wink:
Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs

Le 4 janv. 2015 à 17:16, John Bohne <johnb...@gmail.com <javascript:>> a
écrit :

I was looking in the documentation and online for Marvel but I am not sure
how to implement security for Marvel. For example, if one were to access
example.com:9200/_plugin/marvel/sense/index.html , one would be able to
put documents through Sense on my cluster(s). I saw something about
marvel.hosts but I am not sure how to implement that.

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearc...@googlegroups.com <javascript:>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/559eadaa-37cb-4129-8a65-38847c60126f%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/559eadaa-37cb-4129-8a65-38847c60126f%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/22d92adf-b8ab-4b7c-a955-64c05a9a96af%40googlegroups.com.
For more options, visit https://groups.google.com/d/optout.

4

You set marvel.agent.exporter.es.hosts
​ ​
in elasticsearch.yml.

​It'd let you then put some kind of proxy layer between ES but still allow
marvel to operate.​

On 5 January 2015 at 21:26, John Bohne johnbohne1@gmail.com wrote:

Why would I want to do that? I'm using Apache by the way.

I saw something about marvel.agent.exporter.es.hosts and setting up
user:pwd@host:9200 but the documentation doesn't really specify where to
do this. In elasticsearch.yml? Under what heading? Would this even solve
the problem?

On Sunday, January 4, 2015 12:15:23 PM UTC-6, David Pilato wrote:

If you have disabled access to PUT method (with Nginx for example), SENSE
won't be able to PUT any document.

My 2 cents.

--
David :wink:
Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs

Le 4 janv. 2015 à 17:16, John Bohne johnb...@gmail.com a écrit :

I was looking in the documentation and online for Marvel but I am not
sure how to implement security for Marvel. For example, if one were to
access example.com:9200/_plugin/marvel/sense/index.html , one would be
able to put documents through Sense on my cluster(s). I saw something about
marvel.hosts but I am not sure how to implement that.

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearc...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/
msgid/elasticsearch/559eadaa-37cb-4129-8a65-38847c60126f%
40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/559eadaa-37cb-4129-8a65-38847c60126f%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups
"elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an
email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit
https://groups.google.com/d/msgid/elasticsearch/22d92adf-b8ab-4b7c-a955-64c05a9a96af%40googlegroups.com
https://groups.google.com/d/msgid/elasticsearch/22d92adf-b8ab-4b7c-a955-64c05a9a96af%40googlegroups.com?utm_medium=email&utm_source=footer
.
For more options, visit https://groups.google.com/d/optout.

--
You received this message because you are subscribed to the Google Groups "elasticsearch" group.
To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscribe@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9NUYMxEac3KYWWCwycQcztiCw1NDevR5CYTsfFiPfQqw%40mail.gmail.com.
For more options, visit https://groups.google.com/d/optout.