Skip to content

Pipe X-Opaque-Id header to AuditTrail logs and Elasticsearch API calls #62018

@joshdover

Description

@joshdover

Supports #52125
Related #60119

We need to be able to correlate different logs in the regular system logger, Kibana's audit logs, and Elasticsearch's audit logs to the same user request.

When the X-Opaque-Id has been set on the request (for example, by a reverse proxy), we should:

  • Forward this header to Elasticsearch
    • This may already be solved by the elasticsearch.requestHeadersWhitelist configuration option. This should be verified that this works.
  • Include the identifier on any AuditTrail logs emitted during an HTTP request. This should automatically be bound via the request context.

Metadata

Metadata

Assignees

Labels

Feature:New PlatformNeededFor:SecurityTeam:CorePlatform Core services: plugins, logging, config, saved objects, http, ES client, i18n, etc t//enhancementNew value added to drive a business result

Type

No type
No fields configured for issues without a type.

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions