If the Kibana app wasn't exposed I could surely host my own and connect it to the same exposed Elastic Search.
It's like saying "someone stole my keys ... and if that wasn't bad enough they got the key ring!"
It's like saying "someone stole my keys ... and if that wasn't bad enough they got the key ring!"
I completely agree that it doesn't make it less secure, but it does make it more.. 'oh come on'. I mean, nobody who was using it legitimately realised?