Update Api script and Scripting in Elastic search


I am trying to use the update api of elasticsearch. In that i can use the script tag to update fields like counter.
Now my concern is it is said that by default dynamic scripting is off and i dont want to get into any security issues, so can i still use the update api or do i need to turn on the dynamic scripting in it?

elastic search version : 2.3

(David Pilato) #2

You can write a groovy script file and put it on your nodes as explained here: https://www.elastic.co/guide/en/elasticsearch/reference/2.3/modules-scripting.html#modules-scripting

(Nik Everett) #3

And in 5.0 the default language for scripts (painless) is fully sandboxed and enabled by default.

(system) #4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.