Hi, have you looked into the http-server documentation? Looking at their latest version, 0.8.0, there's no indication that --cors takes a value, which you have as * Not only that, but there's an open issue that --cors doesn't work: https://github.com/indexzero/http-server/issues/394
See if you can create a minimal setup of cross-origin requests working for this http server without going through Kibana to do it. Making the request from a script tag in an HTML page hosted with a different domain should do it.