Monitoring User Search Requests

Good Morning,

Is there a way to monitor users searches?

I need to find out which of the active users are performing heavy searches on Graylog 3.1, is this possible?

Try to limit maximum history, that user can search e.g. One month in settings, and disable All messages:


if you are monitoring the performance of the GL and ES nodes, as well as auditing user activity (requires Enterprise) then simply cross-reference the 2 and go have a conversation with the offending parties.

This topic was automatically closed 14 days after the last reply. New replies are no longer allowed.