Requesting to share the steps on how to capture web console login logout to graylog web interface.
you mean like what is written in the documentation?
http://docs.graylog.org/en/2.2/pages/securing.html#logging-user-activity
Thanks Jan for the reply, Yes I am looking for this on graylog web interface.
I could see all logs in server log files (/var/log/graylog-server/server.log), but is it possible to see all these logs in Graylog web interface as well - this would help users who do not have direct access to server to look and search for older entries.
You might find the Audit Plugin useful:
Thanks for the update, will try out this.