log whoever connects to the kibana web interface

Elastic Stack Kibana
1

Hi everyone, I need to have logs of who connects to the kibana web interface, I have several accounts and I would like to be able to monitor these accesses. I have kibana version 8.3.2, what can I do? Thank you

2

Welcome to the community!

Audit logs

3

As mentioned you need to enable Audit logs, but keep in mind that this is a subscription feature, which means that this will not work if you are using the Basic license, you need a paid license for this.

4

Hi,

you can enable audit logging:

open the kibana.yml and add the following settings to enable audit logging:

xpack.security.audit.enabled: true
xpack.security.audit.appender:
  kind: file
  path: /path/to/your/audit.log
  layout:
    kind: json

Replace /path/to/your/audit.log with the path where you want to store the audit log file.

REF.

Regards

5

thanks to everyone, by putting into practice solution 2 of the kibana.yml file the site becomes unreachable. can I do anything else? Thank you

6

As mentioned, do you have a paid license? This feature will only work if you have a paid license like platinum or enterprise, it doesnt work with a basic license.

7

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.