Is it possible to log authentication attempts for Kibana?

Elastic Stack Kibana
1

Hi!

I'm new to ELK and have successfully enabled authentication in Kibana. I've also enabled logging to logfile. Is it possible to configure attempts to Kibana to the logfile.

i.e.:
Timestamp, username, login status [success / fail]

All of my google results are now purple. Any tips appreciated :slight_smile:

Cheers,
Karl

2

Hey @krlwbstrm, we don't currently log authentication attempts themselves. Kibana has an audit log but it's only logging saved-object authorization related events at the moment.

All authentication in Kibana defers to Elasticsearch, so you can use their audit log to view all authentication attempts whether they're directly via Elasticsearch or through Kibana.

3

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.