Where to find Elasticsearch internal logs when using ECK

Hello all,

I’ve deployed an Elastic stack using ECK and I’m trying to understand what logs Elastic produces and sotres about itself and how to access them.

For example, I’d like to investigate whether Elasticsearch previously reached the flood-stage disk usage watermark, and determine:

  • whether this information is logged,

  • where those logs are stored,

  • and how they can be queried (e.g. via Discover).

Any clarification on what is available by default with ECK versus what requires explicit configuration would be very helpful.

Thanks in advance.