# How do I configure auditbeat to show on elastic all the users of the servers and what activities they did on the server

**URL:** <https://discuss.elastic.co/t/how-do-i-configure-auditbeat-to-show-on-elastic-all-the-users-of-the-servers-and-what-activities-they-did-on-the-server/350856>\
**Category:** Elastic Observability\
**Created:** [January 11, 2024, 12:40pm UTC](https://discuss.elastic.co/t/how-do-i-configure-auditbeat-to-show-on-elastic-all-the-users-of-the-servers-and-what-activities-they-did-on-the-server/350856 "2024-01-11T12:40:00Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Emilia\_Kullutwe](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/emilia_kullutwe/32/130707_2.png) [@Emilia\_Kullutwe](https://discuss.elastic.co/u/Emilia_Kullutwe)\
**Post date:** [January 11, 2024, 12:40pm UTC](https://discuss.elastic.co/t/how-do-i-configure-auditbeat-to-show-on-elastic-all-the-users-of-the-servers-and-what-activities-they-did-on-the-server/350856/1 "2024-01-11T12:40:00Z")

</div>

I want to know the usernames of all the users who have access to particular server, I also want to know what activities they did on the server. How do I configure auditbeat to show all this on elastic.

I am using Elastic Version 7.17.5. Currently I can see the users who have logged in under observability/dashboard/logins. And under observability/dashboard/users I can see users who have access to the servers. But I want to see their names, currently they are displayed in a way I cant tell who exactly are the users

"root  
bin  
daemon  
adm  
lp  
sync  
shutdown  
halt  
mail  
operator  
games  
ftp  
nobody  
systemd-network  
dbus  
polkitd  
sshd  
postfix  
rpc  
ntp  
rpcuser  
nfsnobody  
sssd  
tss  
apache  
nginx"

I want elastic to give me actual names/usernames, how do I do it?