We'd like to be able to log all REST requests into our ES nodes -- I know that I can turn on the "slow query logging" and set the threshold to 0, but I'd like something more robust than that. Is there a logger somewhere buried in ES that logs out enough data that we can create an Apache-style log line for every web request that comes into the ES cluster?
Historically we've done gotten around this by using something like Nginx/APache in front of ES ... but we don't see the need to do that going forward if we can get it through ES directly. Also with ES/Shield now handling SSL and Auth, I really hate to leverage apache purely as a heavy-weight logger..
