Topic on Project:Support desk

85.255.237.14 (talkcontribs)

Hi,

I'm using CirrusSearch. I just wanted to confirm, on a public wiki do you agree there should be no confidential information stored in elasticsearch?

And to confirm I am assuming elasticsearch is only used for Cirrussearch.


i.e. no logs are stored with, say, emails, passwords, or anything that could be a security risk?

Thank you

Bawolff (talkcontribs)

depends if someone writes sensitive info on your wiki.


Also be careful-public access to your elastic search cluster can lead to severe security issues (unrelated to sensitive data).

85.255.237.14 (talkcontribs)

Understood. Thank you Bawolff