Log Queries Produced by Shield

security

(Adam Stortz) #1

I have configured the slowlog to log out the queries and that is working. However, it is logging the queries exactly as they are sent to elastic, not the query that is produced by shield based on the user's roles.

Is there a way to get the query AFTER shield has added the role information?


(Jay Modi) #2

Unfortunately this is not audited today, but we will definitely consider this as part of future enhancements to our auditing.


(system) #3