# VA's in elastic search

**URL:** <https://discuss.elastic.co/t/vas-in-elastic-search/366902>\
**Category:** Elasticsearch\
**Created:** [September 21, 2024, 6:18am UTC](https://discuss.elastic.co/t/vas-in-elastic-search/366902 "2024-09-21T06:18:41Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![amjad](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/amjad/32/140039_2.png) [@amjad](https://discuss.elastic.co/u/amjad)\
**Post date:** [September 21, 2024, 6:18am UTC](https://discuss.elastic.co/t/vas-in-elastic-search/366902/1 "2024-09-21T06:18:41Z")

</div>

Hi All,

Hope all are doing well.

we are creating the users in elastic cluster with the rest api's of elastic, now We have received 3 VA's for the elasticsearch api's,

1. Insecure HTTP methods enabled
2. Missing Cache Controls in Header Configuration
3. Security Misconfigurations-Security headers are missing

I tried to close these VA's within elastic without nginx or apache. but i can't.

please help me how can i close these VA's with in elasticsearch

Thanks in advance