Security issues of Elasticsearch v1.1.1 used in Talend Log Server


Elasticsearch version 1.1.1 used in Talend Log Server has a security vulnerability issue, and this article proposes a solution to this issue that impacts Talend products versions 5.4.x to 5.6.1.

For more information on this issue, please read the Security Issues page on the Elastic official website.



This article only applies to Talend products version between 5.4.x to 5.6.1.


If you are running a Talend product with a version between 5.4.x and 5.6.1, and you have the Talend Log Server installed, you need to complete the following configuration changes to properly secure your system:

  1. Create a file called elasticsearch.yml in your Talend Log Server installation directory (/Talend/version/Talend_logServer_dir).
  2. Edit the file and add the following lines to disable dynamic scripting:

    script.disable_dynamic: true
    http.cors.allow-origin: "http://TAC_SERVER_HOST:TAC_SERVER_PORT"
  3. Restart the Talend Log Server to incorporate your changes.
Version history
Revision #:
4 of 4
Last update:
‎02-24-2019 11:13 PM
Updated by:
Labels (2)