Read permission only for Elastic Search

[banaszeknorbert]

Hi,
Is it possible to give permission to read data only for Elastic Search? If possible, how to do it? Recently I have a problem with high consumption of transfer and is not related to higher user activity (800mb per day - normally was 20+/-). Most of data is accessed via elastic search.

[katowulf]

I'm not really sure what this means. When using Flashlight, the user is not directly communicating with ES, just the Flashlight service. If you don't want Flashlight to index data, then you can simply remove the paths that it monitors for changes in config.js.

[banaszeknorbert]

I want to prevent bad people from downloading my data via rest:P

[katowulf]

You don't need to expose ES to anything but your Flashlight service. There's no need for it to be available via REST.

[banaszeknorbert]

The problem is that for 1-2 weeks there is a 20mb permanent bandwidth usage per hour (also in the night) + users usage. I have right security rules, heroku bonsai does show nothing in logs. I don't know what happening and I'm trying to find why that's happening.