# Question about Auditlog Setup

**URL:** <https://forum.search-guard.com/t/question-about-auditlog-setup/1750>\
**Category:** Search Guard\
**Created:** [February 4, 2020, 9:47pm UTC](https://forum.search-guard.com/t/question-about-auditlog-setup/1750 "2020-02-04T21:47:26Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![mchakradeo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/mchakradeo/32/478_2.png) [@mchakradeo](https://forum.search-guard.com/u/mchakradeo)\
**Post date:** [February 4, 2020, 9:47pm UTC](https://forum.search-guard.com/t/question-about-auditlog-setup/1750/1 "2020-02-04T21:47:26Z")

</div>

Hello,

I wanted to try out the Searchguard audit feature.  
I do see login level audit logs, but not READ request level audit logs.

Here are my configs specific to audit settings:

Elasticsearch.yml:

```auto
searchguard.audit.type: debug
searchguard.compliance.history.read.watched_fields:
    - "*"

```

Versions:  
Elasticsearch Nodes: 7.4.0  
Kibana: 7.4.0  
SG plugin: 7.4.0-36.2.0

Can someone help with this?  
Thank you.

---

<div class="post-metadata">

**Author:** ![hsaly](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/hsaly/32/21_2.png) [@hsaly](https://forum.search-guard.com/u/hsaly)\
**Post date:** [February 18, 2020, 9:55am UTC](https://forum.search-guard.com/t/question-about-auditlog-setup/1750/2 "2020-02-18T09:55:44Z")

</div>

Please see [Read History | Security for Elasticsearch | Search Guard](https://docs.search-guard.com/latest/compliance-read-history)

It should be look more like:

```auto
searchguard.audit.type: debug
searchguard.compliance.history.read.watched_fields:
    - "*,*"

```

(First wildcard means: all indices, second means all fields)

---

<div class="post-metadata">

**Author:** ![system](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.search-guard.com/system/32/1870_2.png) [@system](https://forum.search-guard.com/u/system)\
**Post date:** [March 10, 2020, 9:55am UTC](https://forum.search-guard.com/t/question-about-auditlog-setup/1750/3 "2020-03-10T09:55:47Z")

</div>

Closed on March 10, 2020, 9:55am UTC

This topic was automatically closed 21 days after the last reply. New replies are no longer allowed.