# How to check the user details who delete the pipeline from Kibana or elasticseach
**URL:** https://discuss.elastic.co/t/how-to-check-the-user-details-who-delete-the-pipeline-from-kibana-or-elasticseach/290276
**Category:** Elasticsearch
**Created:** [November 26, 2021, 11:02am UTC](https://discuss.elastic.co/t/how-to-check-the-user-details-who-delete-the-pipeline-from-kibana-or-elasticseach/290276 "2021-11-26T11:02:25Z")
**Posts on this page:** 3
**Page:** 1
### Author:  [@muralikrishna](https://discuss.elastic.co/u/muralikrishna)
#### Post date: [November 26, 2021, 11:02am UTC](https://discuss.elastic.co/t/how-to-check-the-user-details-who-delete-the-pipeline-from-kibana-or-elasticseach/290276/1 "2021-11-26T11:02:25Z")
Hello Everyone,
We have situation that someone has deleted one of our Logstash pipeline from kibana (centrally managing from kibana) around 30 days back but we have noticed recently.
Is there a possibility to check the user who has deleted the pipeline from any of the logs or using API etc..
FYI. Our monitoring log data is kept for last 7 days and will be purged then.
Thanks In advance for any help 🙂
---
### Author:  [@warkolm](https://discuss.elastic.co/u/warkolm)
#### Post date: [November 28, 2021, 9:43pm UTC](https://discuss.elastic.co/t/how-to-check-the-user-details-who-delete-the-pipeline-from-kibana-or-elasticseach/290276/2 "2021-11-28T21:43:01Z")
This would be shown in audit logging - [Enable audit logging | Elasticsearch Guide [7.15] | Elastic](https://www.elastic.co/guide/en/elasticsearch/reference/current/enable-audit-logging.html). I am not sure if there is another way, or if it's logged elsewhere in the stack,
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [December 26, 2021, 9:43pm UTC](https://discuss.elastic.co/t/how-to-check-the-user-details-who-delete-the-pipeline-from-kibana-or-elasticseach/290276/3 "2021-12-26T21:43:43Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.