How to disable anonymous viewing of the statistics?

[stather-it-consulting]

Hello

-Version: 5.5.2-944 (Amazon AWS)
-WebSDK: 2.0.170

How can i disable viewing stats without http/https anonymously


http://host:8081/?action=stat
https://host:8444/?action=stat




Best,
Thomas

 

[Max]

Good day.

How can i disable viewing stats without http/https anonymously

Statistics page cannot be restricted because it will break third party monitoring integrations (Zabbix, Prometheus+Grafana etc).
You can restrict accees from external network by security group rules, and get statistics data to monitoring tools via internal network only.

 

[stather-it-consulting]

Ah ok i see, thanks

 

[ajayalag1974]

Good day.

Statistics page cannot be restricted because it will break third party monitoring integrations (Zabbix, Prometheus+Grafana etc).
You can restrict accees from external network by security group rules, and get statistics data to monitoring tools via internal network only.

Hello,

I wan't to protect/lock those stats probably using basic http authentication just like rest-api can be protected using disable_rest_auth=false, if that not possible, than would want to completely disable those stats.

I am not using these 3rd party monitoring tools, i don't need them, please tell how to do that ? One way could be ourself modifying wcs code, other could be blocking urls having keywords via some configurations in linux, but that would be far from ideal, please tell some ideal/official/good way to disable those stats. Thanks.

 

[Max]

I wan't to protect/lock those stats probably using basic http authentication just like rest-api can be protected using disable_rest_auth=false, if that not possible, than would want to completely disable those stats.

You can try to disable stats at all using HTTP interfaces access restriction:
by default, the setting is

http_enable_paths=rest,action,admin,shared,client,client_records,embed_player,empty,health-check

Removing action from the list should disable statisctic interface. A minimal set of interfaces looks like this

http_enable_paths=rest,shared,embed_player,empty,health-check

 

[ajayalag1974]

You can try to disable stats at all using HTTP interfaces access restriction:
by default, the setting is

http_enable_paths=rest,action,admin,shared,client,client_records,embed_player,empty,health-check

Removing action from the list should disable statisctic interface. A minimal set of interfaces looks like this

http_enable_paths=rest,shared,embed_player,empty,health-check

Hi,

Thanks for the quick response.

Didn't knew that "action" keyword is meant to disable those "?action=stats" urls, i assumed otherwise since the property name "http_enable_paths" says "paths" i thought its only for paths in the url like "/action"

Also, i just have started using your service/software 2 days back, i must say this is the most professionally built software/service i have ever seen in my life along with unmatched support which is very fast & helpfull.

Good Job and thanks for all the effort you guys put it.