Is there any APIs to fetch query history?

wendy · February 20, 2020, 8:45am

Hi all,

I'd like to access the query history of users by invoking API for analyzing the user behavior.
Does Elastic Search provide such an API for fetching query history? Any comment is greatly appreciated.

Best Regards
Wendy

forloop · February 21, 2020, 1:17am

Hi @wendy, there is no such API in Elasticsearch for this

wendy · February 21, 2020, 1:47am

Thanks for your reply.
I'd like to get the query history of user in kibana for analyzing the user behavior. Do you have any suggestions?

Best Regards
Wendy

Muhammad_Ariful_Isla · March 2, 2020, 12:21pm

Hi @forloop ,
Is there any other way to achive it? I mean if an malicious/naive user used -X DELETE, how can I prove that the data deletion was not administrator's fault?

dadoonet · March 2, 2020, 1:08pm

IMO the best thing to do is to secure your cluster.
Don't let users who should just read data be able to write or delete.

system · March 30, 2020, 1:08pm

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.