Other relevant Elasticsearch settings

Automatic index creation

Marvel relies on Elasticsearch’s capability to automatically create new indices when indexing documents. Some people like to disable this feature to better protect against mistakes in production clusters. To do so but still allow the creation of Marvel indices you need to set the following:

action.auto_create_index: .marvel-*

More information is available here

CORS

If you are using Sense to access a remote cluster, you will need to make sure Cross-origin resource sharing (CORS) is enabled on the cluster. The relevant settings are:

http.cors.enabled: true
http.cors.allow-origin: /.*/  
http.cors.allow-credentials: true 

Elasticsearch will allow CORS requests from any source, echoing the source in the Allow Origin header. Needed for basic authentication support. You may want tighten it to only allow the domain where Sense is hosted.

Elasticsearch will respond with Access-Control-Allow-Credentials. Needed for basic authentication support.

Please see the Elasticsearch documentation for more information.

enabling CORS may result in unwarrented access to your cluster. Consider these settings carefully.