Question about failed authentication logging

I want to enable logging when a user failed to log in via Kibana web UI. But I'm sure where should I enable it. The documents were a bit confusing so I'm not sure should I make changes to elasticsearch.yml or kibana.yml.


I am not 100% sure that Kibana will do that, because you actually auth with Elasticsearch, not Kibana.

And I am pretty sure by default this is logged.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.