Audit logging - Is it possible to include request_body to event type access_granted?

security

(Arto Heikkilä) #1

Hi,

is it possible to log the request body of access_granted event type? Similarly to event type authentication_failed.

Or is there any other option to audit log what searches user has made in elasticsearch?

Kind regards,

-Arto


(Steve Kearns) #2

Hi Arto,

It's not currently possible to log the request body of the access_granted event type. This is definitely something we're looking into for an upcoming release!

Thanks,
Steve


(system) #3