# User management audit events in Elasticsearch
**URL:** https://discuss.elastic.co/t/user-management-audit-events-in-elasticsearch/177114
**Category:** Elasticsearch
**Created:** [April 16, 2019, 3:35pm UTC](https://discuss.elastic.co/t/user-management-audit-events-in-elasticsearch/177114 "2019-04-16T15:35:18Z")
**Posts on this page:** 5
**Page:** 1
### Author:  [@landoncarlson85](https://discuss.elastic.co/u/landoncarlson85)
#### Post date: [April 16, 2019, 3:35pm UTC](https://discuss.elastic.co/t/user-management-audit-events-in-elasticsearch/177114/1 "2019-04-16T15:35:18Z")
I can see in the audit logs on my linux box (/var/log...... ) when I create a user in Kibana or change a user. However this same log file does not show when I delete a user in Kibana. Does that event get logged to another log file or is it a setting I have to enable within Kibana?
---
### Author:  [@azasypkin](https://discuss.elastic.co/u/azasypkin)
#### Post date: [April 16, 2019, 3:39pm UTC](https://discuss.elastic.co/t/user-management-audit-events-in-elasticsearch/177114/2 "2019-04-16T15:39:10Z")
Hi @landoncarlson85,
Hmm, is it ES audit logs or Kibana? I can't recall that Kibana was using audit logging for cases like this (though eventually it will).
Best,
Oleg
---
### Author:  [@landoncarlson85](https://discuss.elastic.co/u/landoncarlson85)
#### Post date: [April 16, 2019, 3:43pm UTC](https://discuss.elastic.co/t/user-management-audit-events-in-elasticsearch/177114/3 "2019-04-16T15:43:50Z")
@azasypkin
These events related to the actions described above are in the ES audit logs.
---
### Author:  [@azasypkin](https://discuss.elastic.co/u/azasypkin)
#### Post date: [April 16, 2019, 3:57pm UTC](https://discuss.elastic.co/t/user-management-audit-events-in-elasticsearch/177114/4 "2019-04-16T15:57:11Z")
Got it, then I'll move this topic to Elasticsearch so they can give you more details. In the meantime, [this issue](https://github.com/elastic/elasticsearch/issues/29766) seems to be relevant.
Best,
Oleg
---
### Author:  [@system](https://discuss.elastic.co/u/system)
#### Post date: [May 14, 2019, 3:57pm UTC](https://discuss.elastic.co/t/user-management-audit-events-in-elasticsearch/177114/5 "2019-05-14T15:57:14Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.