Trace queries and filters for audit


I enabled audit logs in Kibana but I cant find a way to track what is being put in the search bar, and which filters are being applied to dashboards/search sessions.

Is there a way to achieve this?


After some research, the only thing I can think of is turning on slowlogs for all queries, and then via ingest pipeline start parsing and filtering what I need.

Is there any other thing I can do? I run a search in a dashboard and tons of queries are executed.

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.