Is it possible to log authentication attempts for Kibana?

[krlwbstr (Karl Webster)]

Hi!

I'm new to ELK and have successfully enabled authentication in Kibana. I've also enabled logging to logfile. Is it possible to configure attempts to Kibana to the logfile.

i.e.:
Timestamp, username, login status [success / fail]

All of my google results are now purple. Any tips appreciated

Cheers,
Karl

[Brandon_Kobel]

Hey @krlwbstrm, we don't currently log authentication attempts themselves. Kibana has an audit log but it's only logging saved-object authorization related events at the moment.

All authentication in Kibana defers to Elasticsearch, so you can use their audit log to view all authentication attempts whether they're directly via Elasticsearch or through Kibana.