collective.elasticindex 1.1

Usage

After adding this extension to your buildout (including the zcml), you can install the extension in Plone. A configuration screen is available inside site setup. It will let you configure the URLs of the ElasticSearch servers to use in order to index, and search. To proceed:

• Fill in the ElasticSearch settings,

• Click on Save,

• Click on Create Index in order to create the ElasticSearch index,

• Click on Import site content in order to index already existing content in ElasticSearch.

You can use the same ElasticSearch server (and probably index) for multiple Plone sites, creating a federated search that way.

Security disclaimer

There is no authentication or access validation while searching or indexing content. The purpose of this search is to be public. If you have private content that you don’t want to be searchable or viewable by unauthorized people, please be sure to check the checkbox Index only published content in the configuration screen.

In addition to this ElasticSearch is not secured by default, meaning there is no authentication to provide in order to index or look-up content. Be sure to hide it behind a firewall and use a proxy or Apache in order to restrict the requests made to it: you only need to allow access via POST to the sub-URL _search after the index name configured in the configuration screen. For instance, if the index name is plone, you shall allow only requests to http://your-public-es-url/plone/_search. After you configured your proxy, be sure to configure its public URL, like http://your-public-es-url in the configuration screen so the search page knows how to contact it.

1.1 (05/11/2013)

• Index Plone authorization in the index and provide an option to redirect the queries through Plone in order to restrict the search results to what the current user is allowed to see. Effectively Plone will modify the search query to include a restriction on the authorization.

• Improve the public search page.

• Improve the public search javascript to ignore special Lucene characters in the query and colons except if they are before an authorized term.

1.0 (13/09/2013)

• Initial release.