Requesting to share the steps on how to capture web console login logout to graylog web interface.
you mean like what is written in the documentation?
Thanks Jan for the reply, Yes I am looking for this on graylog web interface.
I could see all logs in server log files (/var/log/graylog-server/server.log), but is it possible to see all these logs in Graylog web interface as well - this would help users who do not have direct access to server to look and search for older entries.
You might find the Audit Plugin useful:
Thanks for the update, will try out this.