OpenSearch Dashboards

Overview

OpenSearch Dashboards is the web interface for exploring and operating OpenSearch data. It normally listens on port 5601. This route covers Dashboards, not the OpenSearch REST or transport endpoints.

OpenSearch Dashboards can expose sensitive application data or administrative functions. A Pomerium route adds identity-aware policy before a user reaches the selected endpoint while the service keeps its own detailed permissions.

Pomerium controls who can establish the selected route to OpenSearch Dashboards. OpenSearch Dashboards remains responsible for its application, protocol, data, and service-level permissions.

How it works

Create a Pomerium HTTPS route for the selected private HTTP endpoint. Configure the application public URL and trusted proxy settings for the Pomerium origin.

Keep application authentication and granular authorization active when the service needs them. Give API and automation clients a reviewed noninteractive authentication path.

Expose only the Dashboards endpoint and configure its public URL or base path for the Pomerium origin. Test saved objects, API calls, and links to OpenSearch resources.

Example

Analysts reach private OpenSearch Dashboards through Pomerium. OpenSearch security keeps tenant, index, role, and data permissions.

Considerations

• A Dashboards route does not protect the OpenSearch REST or transport endpoints.
• Preserve OpenSearch security and configure the public base path when the deployment uses one.