# Want to disable Logstash http://localhost:9600/ URL JSON output
**URL:** https://discuss.elastic.co/t/want-to-disable-logstash-http-localhost-9600-url-json-output/299352
**Category:** Logstash
**Created:** [March 10, 2022, 3:41pm UTC](https://discuss.elastic.co/t/want-to-disable-logstash-http-localhost-9600-url-json-output/299352 "2022-03-10T15:41:13Z")
**Posts on this page:** 8
**Page:** 1
### Author:  [@shahidraza](https://discuss.elastic.co/u/shahidraza)
#### Post date: [March 10, 2022, 3:41pm UTC](https://discuss.elastic.co/t/want-to-disable-logstash-http-localhost-9600-url-json-output/299352/1 "2022-03-10T15:41:13Z")
Hi Team,
We don't want to see JSON output as it contains Hostname and other sensitive information and it's accessible without user id and password too.
Please share details to disable this so that security vulnerability can be closed.
Thanks,
Shahid
---
### Author:  [@shahidraza](https://discuss.elastic.co/u/shahidraza)
#### Post date: [March 10, 2022, 6:38pm UTC](https://discuss.elastic.co/t/want-to-disable-logstash-http-localhost-9600-url-json-output/299352/2 "2022-03-10T18:38:47Z")
@kvch Please help to tag someone who can help if possible.
---
### Author:  [@ylasri](https://discuss.elastic.co/u/ylasri)
#### Post date: [March 10, 2022, 6:47pm UTC](https://discuss.elastic.co/t/want-to-disable-logstash-http-localhost-9600-url-json-output/299352/3 "2022-03-10T18:47:24Z")
You can secure the stats API of Logstash
> **[Monitoring Logstash with APIs | Logstash Reference \[8.1\] | Elastic](https://www.elastic.co/guide/en/logstash/current/monitoring-logstash.html#monitoring-api-security)**
---
### Author:  [@ylasri](https://discuss.elastic.co/u/ylasri)
#### Post date: [March 10, 2022, 6:49pm UTC](https://discuss.elastic.co/t/want-to-disable-logstash-http-localhost-9600-url-json-output/299352/4 "2022-03-10T18:49:10Z")
Currently, i think we can't disable logstash Stats API
>
>
> @L4rS6 discovered an issue with our metric collection; it doesn't work when proc…fs is not mounted.
> For security reason users can disable the access of procfs, this restriction will make logstash crash at startup.
>
>
> For me, its a bug and we should resolve #6296, but let's open the discussion should we allow users to be able to disable the metric collection? Because right now 5.0 is not usable in that scenario and there is no workaround until we fixed the issue.
---
### Author:  [@shahidraza](https://discuss.elastic.co/u/shahidraza)
#### Post date: [March 10, 2022, 7:15pm UTC](https://discuss.elastic.co/t/want-to-disable-logstash-http-localhost-9600-url-json-output/299352/5 "2022-03-10T19:15:22Z")
Thank you for update @ylasri actually security team raised this issue when they hit localhost:9600 in chrome all the sensitive information they are able to see. How to stop or hide the information please guide.
Thank you in advance.
---
### Author:  [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)
#### Post date: [March 10, 2022, 8:04pm UTC](https://discuss.elastic.co/t/want-to-disable-logstash-http-localhost-9600-url-json-output/299352/6 "2022-03-10T20:04:18Z")
Which version are you using?
In newer versions you can set `api.enabled: false` in `logstash.yml` to disable the API endpoint.
But doing this you will not be able to monitor your logstash instance and your logstash pipelines.
And as already said, you can set a username, password and certificate to access the logstash api endpoint, this is [explained in the documentation](https://www.elastic.co/guide/en/logstash/current/monitoring-logstash.html#monitoring-api-security).
Also, this API endpoint per default only binds to the loopback address, to make a request to the Logstash API on port `9600` you need access to the machine where logstash is running.
---
### Author:  [@Rios](https://discuss.elastic.co/u/Rios)
#### Post date: [March 11, 2022, 5:51am UTC](https://discuss.elastic.co/t/want-to-disable-logstash-http-localhost-9600-url-json-output/299352/7 "2022-03-11T05:51:51Z")
Is this what are you looking for?
**http.enabled: false** / in logstash.yml \<- no web API interface, newer version: api.enabled
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [April 8, 2022, 5:52am UTC](https://discuss.elastic.co/t/want-to-disable-logstash-http-localhost-9600-url-json-output/299352/8 "2022-04-08T05:52:14Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.