Elasticsearch request logging

Elastic Stack Elasticsearch
1

Hey guys,

I know this subject has come up before, however, I wanted to follow up with further discussion.

Is there any way to easily enable logging of all requests sent to Elasticsearch at the beginning of the query call-stack?

Currently, if an expensive query is sent to a node(s), and that query results in OOME, as far as I know, we have no way to audit what queries were in flight when the service failed.

Any suggestions appreciated.

2

Natively, no.

Shield can do this for you as part of its auditing, otherwise you need to proxy it in some other manner.