# HTTP logs for calls coming to elasticsearch

**URL:** <https://discuss.elastic.co/t/http-logs-for-calls-coming-to-elasticsearch/179706>\
**Category:** Elasticsearch\
**Created:** [May 6, 2019, 6:23am UTC](https://discuss.elastic.co/t/http-logs-for-calls-coming-to-elasticsearch/179706 "2019-05-06T06:23:58Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![akshaymaniyar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akshaymaniyar/32/45836_2.png) [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\
**Post date:** [May 6, 2019, 6:23am UTC](https://discuss.elastic.co/t/http-logs-for-calls-coming-to-elasticsearch/179706/1 "2019-05-06T06:23:59Z")

</div>

Is there any way to find the calls (http call logs) which are coming to elasticsearch?  
We recently migrated our data from one cluster to another. However we still see search rate in our kibana (monitoring graph). We want to find out who is still calling our old cluster.

---

<div class="post-metadata">

**Author:** ![dadoonet](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/dadoonet/32/137187_2.png) [@dadoonet](https://discuss.elastic.co/u/dadoonet)\
**Post date:** [May 6, 2019, 6:35am UTC](https://discuss.elastic.co/t/http-logs-for-calls-coming-to-elasticsearch/179706/2 "2019-05-06T06:35:47Z")

</div>

I'd install packetbeat.

---

<div class="post-metadata">

**Author:** ![akshaymaniyar](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/akshaymaniyar/32/45836_2.png) [@akshaymaniyar](https://discuss.elastic.co/u/akshaymaniyar)\
**Post date:** [May 6, 2019, 8:23am UTC](https://discuss.elastic.co/t/http-logs-for-calls-coming-to-elasticsearch/179706/3 "2019-05-06T08:23:04Z")

</div>

> [@dadoonet](#):
>
> packetbeat

Thanks. Will explore packetbeat.

However does ES provide anything out of the box to check what requests are being received by it?

---

<div class="post-metadata">

**Author:** ![warkolm](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/warkolm/32/39224_2.png) [@warkolm](https://discuss.elastic.co/u/warkolm)\
**Post date:** [May 6, 2019, 8:27am UTC](https://discuss.elastic.co/t/http-logs-for-calls-coming-to-elasticsearch/179706/4 "2019-05-06T08:27:01Z")

</div>

Not really, you can use the slowlog with a timing of 0, but it's not really designed for this.

---

<div class="post-metadata">

**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\
**Post date:** [June 3, 2019, 8:28am UTC](https://discuss.elastic.co/t/http-logs-for-calls-coming-to-elasticsearch/179706/5 "2019-06-03T08:28:15Z")

</div>

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.