# Marvel/Sense security? **URL:** \ **Category:** Elasticsearch\ **Created:** [January 4, 2015, 4:16pm UTC](https://discuss.elastic.co/t/marvel-sense-security/21468 "2015-01-04T16:16:44Z")\ **Posts on this page:** 5\ **Page:** 1
**Author:** ![bohnej](https://avatars.discourse-cdn.com/v4/letter/b/b5e925/32.png) [@bohnej](https://discuss.elastic.co/u/bohnej)\ **Post date:** [January 4, 2015, 4:16pm UTC](https://discuss.elastic.co/t/marvel-sense-security/21468/1 "2015-01-04T16:16:44Z")
I was looking in the documentation and online for Marvel but I am not sure how to implement security for Marvel. For example, if one were to access [example.com:9200/\_plugin/marvel/sense/index.html](http://example.com:9200/_plugin/marvel/sense/index.html) , one would be able to put documents through Sense on my cluster(s). I saw something about marvel.hosts but I am not sure how to implement that. -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/559eadaa-37cb-4129-8a65-38847c60126f%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/559eadaa-37cb-4129-8a65-38847c60126f%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\ **Post date:** [January 4, 2015, 6:15pm UTC](https://discuss.elastic.co/t/marvel-sense-security/21468/2 "2015-01-04T18:15:11Z")
If you have disabled access to PUT method (with Nginx for example), SENSE won't be able to PUT any document. My 2 cents. -- David 😉 Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs > Le 4 janv. 2015 à 17:16, John Bohne [johnbohne1@gmail.com](mailto:johnbohne1@gmail.com) a écrit : > > ## I was looking in the documentation and online for Marvel but I am not sure how to implement security for Marvel. For example, if one were to access [example.com:9200/\_plugin/marvel/sense/index.html](http://example.com:9200/_plugin/marvel/sense/index.html) , one would be able to put documents through Sense on my cluster(s). I saw something about marvel.hosts but I am not sure how to implement that. > > You received this message because you are subscribed to the Google Groups "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/559eadaa-37cb-4129-8a65-38847c60126f%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/559eadaa-37cb-4129-8a65-38847c60126f%40googlegroups.com). > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/1F5597BC-4FBE-4D24-814D-11CB6D2BC097%40pilato.fr](https://groups.google.com/d/msgid/elasticsearch/1F5597BC-4FBE-4D24-814D-11CB6D2BC097%40pilato.fr). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![bohnej](https://avatars.discourse-cdn.com/v4/letter/b/b5e925/32.png) [@bohnej](https://discuss.elastic.co/u/bohnej)\ **Post date:** [January 5, 2015, 10:26am UTC](https://discuss.elastic.co/t/marvel-sense-security/21468/3 "2015-01-05T10:26:48Z")
Why would I want to do that? I'm using Apache by the way. I saw something about marvel.agent.exporter.es.hosts and setting up user:pwd@host:9200 but the documentation doesn't really specify where to do this. In elasticsearch.yml? Under what heading? Would this even solve the problem? On Sunday, January 4, 2015 12:15:23 PM UTC-6, David Pilato wrote: > If you have disabled access to PUT method (with Nginx for example), SENSE > won't be able to PUT any document. > > My 2 cents. > > -- > David 😉 > Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs > > Le 4 janv. 2015 à 17:16, John Bohne \<[johnb...@gmail.com](mailto:johnb...@gmail.com) \\> a > écrit : > > I was looking in the documentation and online for Marvel but I am not sure > how to implement security for Marvel. For example, if one were to access > [example.com:9200/\_plugin/marvel/sense/index.html](http://example.com:9200/_plugin/marvel/sense/index.html) , one would be able to > put documents through Sense on my cluster(s). I saw something about > marvel.hosts but I am not sure how to implement that. > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com) \. > To view this discussion on the web visit > [https://groups.google.com/d/msgid/elasticsearch/559eadaa-37cb-4129-8a65-38847c60126f%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/559eadaa-37cb-4129-8a65-38847c60126f%40googlegroups.com) > [https://groups.google.com/d/msgid/elasticsearch/559eadaa-37cb-4129-8a65-38847c60126f%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/559eadaa-37cb-4129-8a65-38847c60126f%40googlegroups.com?utm_medium=email&utm_source=footer) > . > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/22d92adf-b8ab-4b7c-a955-64c05a9a96af%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/22d92adf-b8ab-4b7c-a955-64c05a9a96af%40googlegroups.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\ **Post date:** [January 5, 2015, 9:03pm UTC](https://discuss.elastic.co/t/marvel-sense-security/21468/4 "2015-01-05T21:03:32Z")
You set marvel.agent.exporter.es.hosts ​ ​ in elasticsearch.yml. ​It'd let you then put some kind of proxy layer between ES but still allow marvel to operate.​ On 5 January 2015 at 21:26, John Bohne [johnbohne1@gmail.com](mailto:johnbohne1@gmail.com) wrote: > Why would I want to do that? I'm using Apache by the way. > > I saw something about marvel.agent.exporter.es.hosts and setting up > user:pwd@host:9200 but the documentation doesn't really specify where to > do this. In elasticsearch.yml? Under what heading? Would this even solve > the problem? > > On Sunday, January 4, 2015 12:15:23 PM UTC-6, David Pilato wrote: > > > If you have disabled access to PUT method (with Nginx for example), SENSE > > won't be able to PUT any document. > > > > My 2 cents. > > > > -- > > David 😉 > > Twitter : @dadoonet / @elasticsearchfr / @scrutmydocs > > > > Le 4 janv. 2015 à 17:16, John Bohne [johnb...@gmail.com](mailto:johnb...@gmail.com) a écrit : > > > > I was looking in the documentation and online for Marvel but I am not > > sure how to implement security for Marvel. For example, if one were to > > access [example.com:9200/\_plugin/marvel/sense/index.html](http://example.com:9200/_plugin/marvel/sense/index.html) , one would be > > able to put documents through Sense on my cluster(s). I saw something about > > marvel.hosts but I am not sure how to implement that. > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearc...@googlegroups.com](mailto:elasticsearc...@googlegroups.com). > > To view this discussion on the web visit [https://groups.google.com/d/](https://groups.google.com/d/) > > msgid/elasticsearch/559eadaa-37cb-4129-8a65-38847c60126f% > > [40googlegroups.com](http://40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/559eadaa-37cb-4129-8a65-38847c60126f%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/559eadaa-37cb-4129-8a65-38847c60126f%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). > > > > -- > > You received this message because you are subscribed to the Google Groups > > "elasticsearch" group. > > To unsubscribe from this group and stop receiving emails from it, send an > > email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). > > To view this discussion on the web visit > > [https://groups.google.com/d/msgid/elasticsearch/22d92adf-b8ab-4b7c-a955-64c05a9a96af%40googlegroups.com](https://groups.google.com/d/msgid/elasticsearch/22d92adf-b8ab-4b7c-a955-64c05a9a96af%40googlegroups.com) > > [https://groups.google.com/d/msgid/elasticsearch/22d92adf-b8ab-4b7c-a955-64c05a9a96af%40googlegroups.com?utm\_medium=email&utm\_source=footer](https://groups.google.com/d/msgid/elasticsearch/22d92adf-b8ab-4b7c-a955-64c05a9a96af%40googlegroups.com?utm_medium=email&utm_source=footer) > > . > > For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to [elasticsearch+unsubscribe@googlegroups.com](mailto:elasticsearch+unsubscribe@googlegroups.com). To view this discussion on the web visit [https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9NUYMxEac3KYWWCwycQcztiCw1NDevR5CYTsfFiPfQqw%40mail.gmail.com](https://groups.google.com/d/msgid/elasticsearch/CAEYi1X9NUYMxEac3KYWWCwycQcztiCw1NDevR5CYTsfFiPfQqw%40mail.gmail.com). For more options, visit [https://groups.google.com/d/optout](https://groups.google.com/d/optout). ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [July 6, 2017, 12:40am UTC](https://discuss.elastic.co/t/marvel-sense-security/21468/5 "2017-07-06T00:40:45Z")