I have a query regarding kibana, I assigned a role to a user (lets say User1). After some days that role was revoked from that user. I want to track who revoked that role from that user(User1) ?
Hi @owais,
You can capture this information via Elasticsearch's audit logging but it is not enabled by default.
https://www.elastic.co/guide/en/elasticsearch/reference/current/enable-audit-logging.html
Hope this helps.
Thanks,
Liza
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.