Elasticsearch request logging

Hey guys,

I know this subject has come up before, however, I wanted to follow up with further discussion.

Is there any way to easily enable logging of all requests sent to Elasticsearch at the beginning of the query call-stack?

Currently, if an expensive query is sent to a node(s), and that query results in OOME, as far as I know, we have no way to audit what queries were in flight when the service failed.

Any suggestions appreciated.

Natively, no.

Shield can do this for you as part of its auditing, otherwise you need to proxy it in some other manner.