User management audit events in Elasticsearch

Elastic Stack Elasticsearch
1

I can see in the audit logs on my linux box (/var/log...... ) when I create a user in Kibana or change a user. However this same log file does not show when I delete a user in Kibana. Does that event get logged to another log file or is it a setting I have to enable within Kibana?

2

Hi @landoncarlson85,

Hmm, is it ES audit logs or Kibana? I can't recall that Kibana was using audit logging for cases like this (though eventually it will).

Best,
Oleg

3

@azasypkin

These events related to the actions described above are in the ES audit logs.

4

Got it, then I'll move this topic to Elasticsearch so they can give you more details. In the meantime, this issue seems to be relevant.

Best,
Oleg

5

This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.