It is no difference to other distributed software. There are many facets of security.
If you want authorized access, add a system which authenticates users and manages roles. Elasticsearch does not do this for you. If you want others to not read the Elasticsearch data traffic, set up a private network http://en.wikipedia.org/wiki/Private_network with your own gateway/router plus a reverse proxy for internet access. If you want to trust in your Elasticsearch cluster and keep others from tampering your data, then set up all the hardware and the network connection by yourself and lock others out from physical access to the facility. You can wait for the Elasticsearch security extension which has been announced. Jörg On Thu, Nov 27, 2014 at 6:39 AM, Siddharth Trikha < siddharthtrik...@gmail.com> wrote: > I have set up my ELK stack on a single server and tested it on a very > small setup to get a hands-down on ELK. > I want to use ELK for my system logs analysis. > > Now, I have been reading about ES that it has no security. Also read > something like this: > "DO NOT have ES publicly accessible. That's the equivalent of making your > Wordpress MySQL database accessible to the world. ES is a REST accessible > DB which means that anyone can delete all of your data with access to the > endpoint." > > I am a noob in this. So this means if I put my logs in ES will they be > accessible to everyone (which is scary) ?? > > Please guide me with what all security measures must be taken ?? Please > suggest some links so that I can ensure security. > How to keep my ES cluster private ?? > > -- > You received this message because you are subscribed to the Google Groups > "elasticsearch" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to elasticsearch+unsubscr...@googlegroups.com. > To view this discussion on the web visit > https://groups.google.com/d/msgid/elasticsearch/236c0359-46cb-4359-8484-c311fb102db2%40googlegroups.com > <https://groups.google.com/d/msgid/elasticsearch/236c0359-46cb-4359-8484-c311fb102db2%40googlegroups.com?utm_medium=email&utm_source=footer> > . > For more options, visit https://groups.google.com/d/optout. > -- You received this message because you are subscribed to the Google Groups "elasticsearch" group. To unsubscribe from this group and stop receiving emails from it, send an email to elasticsearch+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/elasticsearch/CAKdsXoH2D6qpQubeceKoz0N67RFTD9HWW%2BK4Dk1Q7b1%3DUgJzdw%40mail.gmail.com. For more options, visit https://groups.google.com/d/optout.
