search

cityindex-attic / logsearch

[unmaintained] A development environment for ELK
Apache License 2.0
24 stars 8 forks source link

Block _all searches #233

Closed dpb587 closed 10 years ago

dpb587 commented 10 years ago

Currently we're allowing /_all/_search which causes too much load for our current setup. This is the exact same issue as #186, but Kibana is now using a different search endpoint (an incorrect one, if you ask me; but that's beside the point).

I think we need to 404 on the /_all/_search location in the nginx config. Something like the following might work:

location /_all/_search {
    return 404;
}

And should be verified with a simple curl localhost:9200 /_all/_search returning 404.

dpb587 commented 10 years ago

Second thought, deny all seems more appropriate than return 404.