Graylog Web Login Logs


(Rahul K) #1

Requesting to share the steps on how to capture web console login logout to graylog web interface.


(Jan Doberstein) #2

you mean like what is written in the documentation?

http://docs.graylog.org/en/2.2/pages/securing.html#logging-user-activity


(Rahul K) #3

Thanks Jan for the reply, Yes I am looking for this on graylog web interface.

I could see all logs in server log files (/var/log/graylog-server/server.log), but is it possible to see all these logs in Graylog web interface as well - this would help users who do not have direct access to server to look and search for older entries.


(Jan Doberstein) #4

You might find the Audit Plugin useful:


(Rahul K) #5

Thanks for the update, will try out this.