Search Guard - Encryption of data at rest

I have a requirement to encrypt sensitive information/fields present in my document.

The searchguard version I’ll be using is 5.6.4-17

Does enterprise version of search guard provide such capability? Since I didn’t find it mentioned in documentation

Thanks

Ashish K

It would not make much sense to add encryption at rest in Elasticsearch / Java directly, so it’s not a direct feature of Search Guard (or competitor products for that matter).

Encryption at rest should be implemented by using system libraries like dm-crypt: dm-crypt - a device-mapper crypto target

···

On Friday, December 22, 2017 at 1:17:39 PM UTC+1, Ashish K wrote:

I have a requirement to encrypt sensitive information/fields present in my document.

The searchguard version I’ll be using is 5.6.4-17

Does enterprise version of search guard provide such capability? Since I didn’t find it mentioned in documentation

Thanks

Ashish K

Hi Jochen,

Thanks for your valuable inputs.

Just a quick query, are there any setups to integrate with Searchguard or this is completely at OS level and we just need to point the path.dir to relevant location.

Could you please provided more reference around it (as it would be very helpful)?

Regards

Ashish K

···

On Friday, December 22, 2017 at 9:51:33 PM UTC+5:30, Jochen Kressin wrote:

It would not make much sense to add encryption at rest in Elasticsearch / Java directly, so it’s not a direct feature of Search Guard (or competitor products for that matter).

Encryption at rest should be implemented by using system libraries like dm-crypt: http://www.saout.de/misc/dm-crypt/

On Friday, December 22, 2017 at 1:17:39 PM UTC+1, Ashish K wrote:

I have a requirement to encrypt sensitive information/fields present in my document.

The searchguard version I’ll be using is 5.6.4-17

Does enterprise version of search guard provide such capability? Since I didn’t find it mentioned in documentation

Thanks

Ashish K