# Audit Logging in kibana

**URL:** <https://discuss.elastic.co/t/audit-logging-in-kibana/223354>\
**Category:** Kibana\
**Created:** [March 12, 2020, 2:35pm UTC](https://discuss.elastic.co/t/audit-logging-in-kibana/223354 "2020-03-12T14:35:52Z")\
**Posts on this page:** 7\
**Page:** 1

<div class="post-metadata">

**Author:** ![owais](https://avatars.discourse-cdn.com/v4/letter/o/7ba0ec/32.png) [@owais](https://discuss.elastic.co/u/owais)\
**Post date:** [March 12, 2020, 2:35pm UTC](https://discuss.elastic.co/t/audit-logging-in-kibana/223354/1 "2020-03-12T14:35:52Z")

</div>

Hi everyone,

We want to monitor the users logging by the Audit logging feature. Can someone tell how to do that Audit logging in kibana?

---

<div class="post-metadata">

**Author:** ![Marta\_Bondyra](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marta_bondyra/32/102122_2.png) [@Marta\_Bondyra](https://discuss.elastic.co/u/Marta_Bondyra)\
**Post date:** [March 12, 2020, 2:57pm UTC](https://discuss.elastic.co/t/audit-logging-in-kibana/223354/2 "2020-03-12T14:57:02Z")

</div>

Hi @owais,

the feature is available for Gold++ licences, you can read more here: [https://www.elastic.co/guide/en/kibana/current/xpack-security-audit-logging.html#:~:text=Audit%20Loggingedit,the%20event%20of%20an%20attack.](https://www.elastic.co/guide/en/kibana/current/xpack-security-audit-logging.html#:~:text=Audit%20Loggingedit,the%20event%20of%20an%20attack.)

---

<div class="post-metadata">

**Author:** ![owais](https://avatars.discourse-cdn.com/v4/letter/o/7ba0ec/32.png) [@owais](https://discuss.elastic.co/u/owais)\
**Post date:** [March 13, 2020, 10:35am UTC](https://discuss.elastic.co/t/audit-logging-in-kibana/223354/3 "2020-03-13T10:35:53Z")

</div>

Hi Marta,

Thanks for reaching out to me.

Kindly guide me with the following query? .

Is there any dashboard monitoring for Audit Logging feature?

Regards,

Owais Khalid

---

<div class="post-metadata">

**Author:** ![owais](https://avatars.discourse-cdn.com/v4/letter/o/7ba0ec/32.png) [@owais](https://discuss.elastic.co/u/owais)\
**Post date:** [March 16, 2020, 2:34pm UTC](https://discuss.elastic.co/t/audit-logging-in-kibana/223354/4 "2020-03-16T14:34:14Z")

</div>

Can you kindly tell is there any way how to monitor the activity of users in kibana ?  
kindly let me know how to achieve this feature in kibana?  
also tell me from where can we find kibana.yml file?  
I didnt installed elasticsearch kibana, i just used the kibana from elasticsearch platform( hosted version of Kibana).  
kindly guide.

---

<div class="post-metadata">

**Author:** ![Marta\_Bondyra](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/marta_bondyra/32/102122_2.png) [@Marta\_Bondyra](https://discuss.elastic.co/u/Marta_Bondyra)\
**Post date:** [March 16, 2020, 5:02pm UTC](https://discuss.elastic.co/t/audit-logging-in-kibana/223354/5 "2020-03-16T17:02:09Z")

</div>

Hi,

sorry I didn't get your question right before. For logging activity of the Kibana users, there's no user activity monitoring implented yet. It's in the process of building, for more information you can track this issue: [https://github.com/elastic/kibana/issues/52125](https://github.com/elastic/kibana/issues/52125)

---

<div class="post-metadata">

**Author:** ![owais](https://avatars.discourse-cdn.com/v4/letter/o/7ba0ec/32.png) [@owais](https://discuss.elastic.co/u/owais)\
**Post date:** [March 17, 2020, 9:00am UTC](https://discuss.elastic.co/t/audit-logging-in-kibana/223354/6 "2020-03-17T09:00:22Z")

</div>

Hi Marta,

I have a query regarding kibana, I assigned a role to a user (lets say User1). After some days that role was revoked from that user. I want to track who revoked that role from that user(User1) ?

Regards,  
Owais Khalid

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [April 14, 2020, 9:00am UTC](https://discuss.elastic.co/t/audit-logging-in-kibana/223354/7 "2020-04-14T09:00:23Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.
