Monitoring ES search requesters

[Shachar0n (Shachar Aharon)]

Hi guys,

Is there a way to get top clients that call a certain ES API (or any API) ?
for example, I'm looking for some output that would give me information like this (not necessarily exactly this output):

in last 1 hour, <IP_address1> called the _search API 20k times
in last 1 hour, <IP_address2> called the _search API 4k times
in last 1 hour, <IP_address3> called the _search API 600 times

Thanks in advance,
Shachar

[warkolm (Mark Walkom)]

We aren't all guys

There's currently nothing native to Elasticsearch for this, you would need to enable audit logging and ingest that into Elasticsearch/

[Shachar0n (Shachar Aharon)]

Ahh I see, thank you!

And I really meant the 'guys' as a general reference to all audience, I thought it is an acceptable approach; I will take this into consideration on my next post