# The update history of cluster settings

**URL:** <https://discuss.elastic.co/t/the-update-history-of-cluster-settings/372872>\
**Category:** Elasticsearch\
**Created:** [January 7, 2025, 4:08am UTC](https://discuss.elastic.co/t/the-update-history-of-cluster-settings/372872 "2025-01-07T04:08:02Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![Richard\_Zhang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richard_zhang/32/140473_2.png) [@Richard\_Zhang](https://discuss.elastic.co/u/Richard_Zhang)\
**Post date:** [January 7, 2025, 4:08am UTC](https://discuss.elastic.co/t/the-update-history-of-cluster-settings/372872/1 "2025-01-07T04:08:02Z")

</div>

as per doc [update cluster settings request](https://www.elastic.co/guide/en/elasticsearch/reference/current/cluster-update-settings.html#cluster-update-settings-api-request) the api request updates the cluster settings.

My question is - Is there any logs for tracking each time this api is called?

I ask because we're seeing a strange setting in the cluster and everyone don't know when and who set this value. We need to figure it out when and who and thus to inter the purpose of this change. Appreciate it.

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [January 7, 2025, 12:33pm UTC](https://discuss.elastic.co/t/the-update-history-of-cluster-settings/372872/2 "2025-01-07T12:33:04Z")

</div>

> [@Richard\_Zhang](#):
>
> Is there any logs for tracking each time this api is called?

Not per default, you would need to enable the Audit logs, which is a paid feature.

So, if you do not have a paid license, you cannot enable audit logs.

---

<div class="post-metadata">

**Author:** ![Richard\_Zhang](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/richard_zhang/32/140473_2.png) [@Richard\_Zhang](https://discuss.elastic.co/u/Richard_Zhang)\
**Post date:** [January 8, 2025, 12:27am UTC](https://discuss.elastic.co/t/the-update-history-of-cluster-settings/372872/3 "2025-01-08T00:27:15Z")

</div>

If we’re using enterprise search, does it mean we already have Audit log feature?

There is a UI to manage audit logs in Kibaba, right?

---

<div class="post-metadata">

**Author:** ![leandrojmp](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/leandrojmp/32/107231_2.png) [@leandrojmp](https://discuss.elastic.co/u/leandrojmp)\
**Post date:** [January 8, 2025, 1:53am UTC](https://discuss.elastic.co/t/the-update-history-of-cluster-settings/372872/4 "2025-01-08T01:53:44Z")

</div>

> [@Richard\_Zhang](#):
>
> If we’re using enterprise search, does it mean we already have Audit log feature?

No, to enable Audit logs you need to have a paid Elasticsearch license.

> [@Richard\_Zhang](#):
>
> There is a UI to manage audit logs in Kibaba, right?

Also no, this is configured in Elasticsearch, Kibana is a client to Elasticsearch, the audit is done by Elasticsearch nodes.

Please check the documentation about audit logging [here](https://www.elastic.co/guide/en/elasticsearch/reference/current/enable-audit-logging.html).