Audit logging - Is it possible to include request_body to event type access_granted?

[artoheik (Arto Heikkilä)]

Hi,

is it possible to log the request body of access_granted event type? Similarly to event type authentication_failed.

Or is there any other option to audit log what searches user has made in elasticsearch?

Kind regards,

-Arto

[skearns (Steve Kearns)]

Hi Arto,

It's not currently possible to log the request body of the access_granted event type. This is definitely something we're looking into for an upcoming release!

Thanks,
Steve