Is there a list of files that get changes for account creation/disabling, login and connection attempts as well as api calls etc. for ELK?

Elastic Stack Elasticsearch
1

How are creating/disabling an Elasticsearch account, logging in to Elasticsearch, network connection to ELK or API calls are logged?
Also, interested to know if there is a ELK specific audit logging.

The purpose of this is to monitor activity on ELK itself.

2

Please see Enable audit logging | Elasticsearch Guide [7.16] | Elastic

3

Thanks.

4

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.