Elasticsearch Audit Logging Enable and configure security audit logging for Elasticsearch via the cluster settings API. Audit logs record security events such as authentication attempts, access grants and denials, role changes, and API key operations — essential for compliance and incident investigation. For Kibana audit logging (saved object access, login/logout, space operations), see kibana-audit . For authentication and API key management, see elasticsearch-authn . For roles and user management, see elasticsearch-authz . For diagnosing security errors, see elasticsearch-security-troublesh…