https://www.elastic.co/docs/reference/elasticsearch/elasticsearch-audit-events
Elasticsearch audit events | Elasticsearch Reference
When you are auditing security events, a single client request might generate multiple audit events, across multiple cluster nodes. The common request.id...
elasticsearch audit eventsreference
https://www.elastic.co/docs/deploy-manage/security/logging-configuration/logfile-audit-events-ignore-policies
Elasticsearch audit events ignore policies | Elastic Docs
The comprehensive audit trail is necessary to ensure accountability. It offers tremendous value during incident response and can even be required for...
elasticsearch audit eventsignorepoliciesdocs