Hi, I'm trying to enable audit loging in elasticsearch, i have a 3 node cluster and on each elasticsearch.yml i added: xpack.security.audit.enabled: true xpack.security.audit.logfile.emit_node_host_address: true Then i try to make some request to see if it is auditing, i execute: curl --noproxy …

I'm using the free license, but auditing is part of xpack and xpack is now open [image] We Opened X-Pack | Elastic We've opened the code for X-Pack features: security, alerting, monitoring, reporting, graph analytics, dedicated APM UIs, and machine learning. Sh…

If you check that last link you'll see there's a difference based on license levels.

so you are saying that even though auditing is part of xpack and xpack is now open, auditing requires gold license, as well as for instance Active Directory integration?

Yep, that has always been the case.

While the code for X-Pack is available in a public repository, we do not claim that it is "Open Source" . See Subscriptions about the different features available. The default distribution of Elasticsearch includes all of X-Pack, but the default license is "basic". You can activate a free trial of …

Audit logging in elasticsearch

Elastic Stack Elasticsearch

warkolm (Mark Walkom) June 24, 2020, 9:58pm 2

What license do you have?

Audit logging is Gold and above - https://www.elastic.co/subscriptions

Topic		Replies	Views
Unable to get audit logs on authentication_failed Elasticsearch elastic-stack-security	4	497	April 9, 2020
Elasticsearch Audit not supported, but still got entries Elasticsearch	4	591	January 11, 2021
Audit logs are not getting generated in elasticsearch 7.3 Elasticsearch elastic-stack-security	2	404	March 8, 2021
Audit logging doesn't work for Elasticsearch Elasticsearch	2	632	July 13, 2020
Audit log file does not appear in the node Elasticsearch	2	537	September 28, 2020

Audit logging in elasticsearch

Related topics