Page 1 of 1
Questions about "Audit log"
Posted: Thu Jul 04, 2019 7:34 am
by nagioscarnovale
Hey everyone,
1) I would like to know where the Audit log lines are stored? .
How can I see these logs from the command line?
2) I tried to delete an index. But this action is not reported in the Audit log
Is a particular setting necessary?
Thanks in advance
Nick
Re: Questions about "Audit log"
Posted: Mon Jul 08, 2019 3:45 am
by nagioscarnovale
Can anyone help me? please.
I saw several log files but found nothing.
thank you so much
Re: Questions about "Audit log"
Posted: Tue Jul 09, 2019 12:32 pm
by scottwilkerson
They are in an elasticsearch index named nagioslogserver_log
Re: Questions about "Audit log"
Posted: Wed Jul 10, 2019 11:21 am
by nagioscarnovale
Thank you so much for your reply.
Great I found the logs in nagioslogserver_log.
For the second question, can't you tell me anything?
I thank you in advance for the support
Re: Questions about "Audit log"
Posted: Wed Jul 10, 2019 11:33 am
by scottwilkerson
Sorry about that.
I checked with the developers and that is not an item that is currently logged to the Audit Log but I could see how it would be useful.
I have put in a feature request to log those deleted through the GUI to be logged.
Re: Questions about "Audit log"
Posted: Wed Jul 10, 2019 12:08 pm
by nagioscarnovale
In addition to troubleshooting on the logs, we are using NLS to ensure above all centralized and secure log management.
I am sure that this will be a feature much appreciated by security IT groups.
I'm glad for your support
Re: Questions about "Audit log"
Posted: Wed Jul 10, 2019 12:49 pm
by scottwilkerson
nagioscarnovale wrote:In addition to troubleshooting on the logs, we are using NLS to ensure above all centralized and secure log management.
I am sure that this will be a feature much appreciated by security IT groups.
I'm glad for your support
I agree