Log incoming connection IP?

Maybe this has been answered before. But I can't seem to find it.
Does anybody know how to enable logging in ES to show the IP address an API is invoked from?
Things like when an index is created, I see the log with timestamp. But I would like to know from what IP is this command invoked from.

Thanks in advance.

This is only possible if you enable audit logging.

Audit Logging is a paid feature, so it is not available with the Basic free license.

thanks for the quick response.