@tsmalley I had already tried setting on kibana.cfg:
logging.verbose: true
elasticsearch.logQueries: true
But I can not see the query string, I do see JSON for internal operations... but no user query JSON.
ops [15:11:53.389] memory: 136.9MB uptime: 0:01:08 load: [3.44 3.01 2.83] delay: 0.215
log [15:11:53.390] [debug][monitoring-ui] Received Monitoring event data
respons [15:11:53.964] GET /ui/favicons/favicon.ico 304 2ms - 9.0B
respons [15:11:53.976] POST /elasticsearch/_msearch 200 10ms - 9.0B
log [15:11:54.097] [debug][plugin] Checking Elasticsearch version
log [15:11:54.099] [debug][admin][elasticsearch][query] 200
HEAD /
log [15:11:54.099] [debug][plugin] Checking Elasticsearch version
log [15:11:54.100] [debug][admin][elasticsearch][query] 200
GET /_nodes?filter_path=nodes.*.version%2Cnodes.*.http.publish_address%2Cnodes.*.ip
log [15:11:54.102] [debug][admin][elasticsearch][query] 200
GET /_nodes/_local?filter_path=nodes.*.settings.tribe
log [15:11:54.103] [debug][admin][elasticsearch][query] 200
POST /_mget
{"docs":[{"_index":".kibana","_type":"config","_id":"5.4.0"}]}
log [15:11:54.105] [debug][admin][elasticsearch][query] 200
GET /_cluster/health/.kibana?timeout=5s
log [15:11:54.106] [debug][admin][elasticsearch][query] 200
POST /.kibana/config/_search
{"size":1000,"sort":[{"buildNum":{"order":"desc","unmapped_type":"string"}}]}
log [15:11:54.187] [debug][esqueue][reporting][worker] j3d4pvpe05zg1c0b3d6dqwvy - querying for outstanding jobs
log [15:11:54.189] [debug][admin][elasticsearch][query] 200
POST /.reporting-*/esqueue/_search?version=true
{"_source":{"excludes":["output.content"]},"query":{"constant_score":{"filter":{"bool":{"filter":{"term":{"jobtype":"printable_pdf"}},"should":[{"term":{"status":"pending"}},{"bool":{"filter":[{"term":{"status":"processing"}},{"range":{"process_expiration":{"lte":"2017-05-31T15:11:54.186Z"}}}]}}]}}}},"sort":[{"priority":{"order":"asc"}},{"created_at":{"order":"asc"}}],"size":10}
log [15:11:54.189] [debug][esqueue][reporting][worker] j3d4pvpe05zg1c0b3d6dqwvy - 0 outstanding jobs returned
log [15:11:56.160] [debug][admin][elasticsearch][query] 200
POST /.reporting-*/esqueue/_search
{"_source":{"excludes":["output.content"]},"sort":{"completed_at":"asc"},"size":10,"query":{"constant_score":{"filter":{"bool":{"must":[{"range":{"completed_at":{"gt":1494936654225,"format":"epoch_millis"}}},{"term":{"created_by":"elastic"}}]}}}}}
respons [15:11:56.162] GET /api/reporting/jobs/list_completed_since?since=2017-05-16T12%3A10%3A54.225Z 200 7ms - 9.0B
log [15:11:56.606] [debug][plugin] Checking Elasticsearch version
log [15:11:56.610] [debug][admin][elasticsearch][query] 200
Am I missing something?