User authentication in Elasticsearch query using python

Question

I'm using elastisearch using Python. My code looks somewhat like this:-

from elasticsearch import Elasticsearch

if __name__ == '__main__': 
    index="IndexPosition"
    es=Elasticsearch(['https://localhost:8080'])
    res = es.search(index='{0}'.format(index), doc_type="log",size=1000, from_=0, body={ "query": {
    "match": {
      
        ...Match condition
      }
    }
  }})

Now, due to changes in architecture user authentication has been added in the elasticsearch.Let's assume username-user and password-pass.How do I pass the username and password in the query..?

score 62 · Answer 1 · edited Mar 19 '20 at 13:14

62

You need to pass the username and password to the Elasticsearch object as shown below:

es = Elasticsearch(['http://localhost:8080'], http_auth=('user', 'pass'))

edited Mar 19 '20 at 13:14

Dean Gurvitz

854
1
10
24

answered Nov 07 '17 at 10:06

Girish kumar

735
6
8

How did you figure this out/find the `http_auth` parameter? – GeneticsGuy Jun 03 '22 at 20:24

score 23 · Answer 2 · edited Jul 07 '20 at 10:59

23

You can pass username, password in url:

ex:

username: elastic

password: changeme

es = Elasticsearch(hosts="http://elastic:changeme@localhost:9200/")

using CURL

curl -X GET "elastic:changeme@localhost:9200/"

edited Jul 07 '20 at 10:59

Abhinav Keshri

595
5
20

answered Dec 02 '19 at 06:21

faisal burhanudin

1,101
12
16

Why does *this* solution work for me, but not the one above (`http_auth=(user,pwd)`)? Also, saving passwords in clear text is fine for proof-of-concept, but I can't do this for the long term. Suggestions as to how to hide the password? – Guy Nov 09 '20 at 08:45
1

@Guy A common way of avoiding hardcoding credentials in the code is using environment variables. https://pypi.org/project/python-dotenv/ allows you to put credentials in a .env file and load them from there as environment variables – Jonáš Jančařík Jan 20 '22 at 14:39

buddemat · Answer 3 · 2022-07-22T11:42:14.893

3

In Elasticsearch 8.x, the http_auth parameter is deprecated, use basic_auth or bearer_auth respectively instead.

Elasticsearch >= 8.x basic auth example:

es = Elasticsearch(['https://localhost:8080'], basic_auth=('user', 'pass'))

Elasticseach < 8.x basic auth example:

es = Elasticsearch(['http://localhost:8080'], http_auth=('user', 'pass'))

edited Jul 22 '22 at 11:42

answered Jul 22 '22 at 10:24

buddemat

4,552
14
29
49

score 2 · Answer 4 · answered Apr 03 '20 at 09:51

2

es = Elasticsearch([{'host': 'localhost', 'port': '8080'}], http_auth=('user', 'pass'))

answered Apr 03 '20 at 09:51

ZeQun

29
1

score 2 · Answer 5 · answered Sep 04 '20 at 03:36

2

yes, use es = Elasticsearch(hosts="http://username:password@es-endpoint:es-port/")

Test success in es version 7.7.1

answered Sep 04 '20 at 03:36

em0t

21
3

hi, am getting an authentication error while trying to see if indices exists? Can you pls provide some sample code. Am using "res = esClient.indices.exists('metadata-store')" after creating esClient object with username/ password – Yuva Oct 19 '20 at 08:24

score 0 · Answer 6 · answered Feb 20 '20 at 13:26

0

you can connect the elasticsearch with below Host url config

es = Elasticsearch(hosts="http://user:pass@localhost:9200/")

answered Feb 20 '20 at 13:26

Hariharan AR

1,386
11
20

User authentication in Elasticsearch query using python

6 Answers6

Linked