Package org.elasticsearch.xpack.security.audit.logfile

Class LoggingAuditTrail

java.lang.Object

org.elasticsearch.xpack.security.audit.logfile.LoggingAuditTrail

All Implemented Interfaces:

org.elasticsearch.cluster.ClusterStateListener, AuditTrail

public class LoggingAuditTrail
extends Object
implements AuditTrail, org.elasticsearch.cluster.ClusterStateListener

Field Summary

Fields

Modifier and Type	Field	Description
static final String	ACTION_FIELD_NAME
static final String	API_KEY_ID_FIELD_NAME
static final String	API_KEY_NAME_FIELD_NAME
static final String	AUTHENTICATION_TYPE_FIELD_NAME
static final String	CHANGE_CONFIG_FIELD_NAME
static final String	CLUSTER_NAME_FIELD_NAME
static final String	CLUSTER_UUID_FIELD_NAME
static final String	CREATE_CONFIG_FIELD_NAME
static final String	DELETE_CONFIG_FIELD_NAME
static final org.elasticsearch.common.settings.Setting<Boolean>	EMIT_CLUSTER_NAME_SETTING
static final org.elasticsearch.common.settings.Setting<Boolean>	EMIT_CLUSTER_UUID_SETTING
static final org.elasticsearch.common.settings.Setting<Boolean>	EMIT_HOST_ADDRESS_SETTING
static final org.elasticsearch.common.settings.Setting<Boolean>	EMIT_HOST_NAME_SETTING
static final org.elasticsearch.common.settings.Setting<Boolean>	EMIT_NODE_ID_SETTING
static final org.elasticsearch.common.settings.Setting<Boolean>	EMIT_NODE_NAME_SETTING
static final String	EVENT_ACTION_FIELD_NAME
static final String	EVENT_TYPE_FIELD_NAME
static final org.elasticsearch.common.settings.Setting<List<String>>	EXCLUDE_EVENT_SETTINGS
protected static final org.elasticsearch.common.settings.Setting.AffixSetting<List<String>>	FILTER_POLICY_IGNORE_ACTIONS
protected static final org.elasticsearch.common.settings.Setting.AffixSetting<List<String>>	FILTER_POLICY_IGNORE_INDICES
protected static final org.elasticsearch.common.settings.Setting.AffixSetting<List<String>>	FILTER_POLICY_IGNORE_PRINCIPALS
protected static final org.elasticsearch.common.settings.Setting.AffixSetting<List<String>>	FILTER_POLICY_IGNORE_REALMS
protected static final org.elasticsearch.common.settings.Setting.AffixSetting<List<String>>	FILTER_POLICY_IGNORE_ROLES
static final String	HOST_ADDRESS_FIELD_NAME
static final String	HOST_NAME_FIELD_NAME
static final org.elasticsearch.common.settings.Setting<List<String>>	INCLUDE_EVENT_SETTINGS
static final org.elasticsearch.common.settings.Setting<Boolean>	INCLUDE_REQUEST_BODY
static final String	INDICES_FIELD_NAME
static final String	INVALIDATE_API_KEYS_FIELD_NAME
static final String	IP_FILTER_ORIGIN_FIELD_VALUE
static final String	LOCAL_ORIGIN_FIELD_VALUE
static final String	LOG_TYPE
static final String	NAME
static final String	NODE_ID_FIELD_NAME
static final String	NODE_NAME_FIELD_NAME
static final String	OPAQUE_ID_FIELD_NAME
static final String	ORIGIN_ADDRESS_FIELD_NAME
static final String	ORIGIN_TYPE_FIELD_NAME
static final String	PRINCIPAL_FIELD_NAME
static final String	PRINCIPAL_REALM_FIELD_NAME
static final String	PRINCIPAL_ROLES_FIELD_NAME
static final String	PRINCIPAL_RUN_AS_FIELD_NAME
static final String	PRINCIPAL_RUN_AS_REALM_FIELD_NAME
static final String	PRINCIPAL_RUN_BY_FIELD_NAME
static final String	PRINCIPAL_RUN_BY_REALM_FIELD_NAME
static final String	PUT_CONFIG_FIELD_NAME
static final String	REALM_FIELD_NAME
static final String	REQUEST_BODY_FIELD_NAME
static final String	REQUEST_ID_FIELD_NAME
static final String	REQUEST_METHOD_FIELD_NAME
static final String	REQUEST_NAME_FIELD_NAME
static final String	REST_ORIGIN_FIELD_VALUE
static final String	RULE_FIELD_NAME
static final Set<String>	SECURITY_CHANGE_ACTIONS
static final String	SECURITY_CHANGE_ORIGIN_FIELD_VALUE
static final String	SERVICE_TOKEN_NAME_FIELD_NAME
static final String	SERVICE_TOKEN_TYPE_FIELD_NAME
static final String	TIMESTAMP
static final String	TRACE_ID_FIELD_NAME
static final String	TRANSPORT_ORIGIN_FIELD_VALUE
static final String	TRANSPORT_PROFILE_FIELD_NAME
static final String	URL_PATH_FIELD_NAME
static final String	URL_QUERY_FIELD_NAME
static final String	X_FORWARDED_FOR_FIELD_NAME

Fields inherited from interface org.elasticsearch.xpack.security.audit.AuditTrail

X_FORWARDED_FOR_HEADER

Constructor Summary

Constructors

Constructor	Description
LoggingAuditTrail(org.elasticsearch.common.settings.Settings settings, org.elasticsearch.cluster.service.ClusterService clusterService, org.elasticsearch.threadpool.ThreadPool threadPool)

Method Summary

Modifier and Type	Method	Description
void	accessDenied(String requestId, org.elasticsearch.xpack.core.security.authc.Authentication authentication, String action, org.elasticsearch.transport.TransportRequest transportRequest, org.elasticsearch.xpack.core.security.authz.AuthorizationEngine.AuthorizationInfo authorizationInfo)
void	accessGranted(String requestId, org.elasticsearch.xpack.core.security.authc.Authentication authentication, String action, org.elasticsearch.transport.TransportRequest msg, org.elasticsearch.xpack.core.security.authz.AuthorizationEngine.AuthorizationInfo authorizationInfo)
void	anonymousAccessDenied(String requestId, String action, org.elasticsearch.transport.TransportRequest transportRequest)
void	anonymousAccessDenied(String requestId, org.elasticsearch.rest.RestRequest request)
void	authenticationFailed(String requestId, String action, org.elasticsearch.transport.TransportRequest transportRequest)
void	authenticationFailed(String requestId, String realm, org.elasticsearch.xpack.core.security.authc.AuthenticationToken token, String action, org.elasticsearch.transport.TransportRequest transportRequest)
void	authenticationFailed(String requestId, String realm, org.elasticsearch.xpack.core.security.authc.AuthenticationToken token, org.elasticsearch.rest.RestRequest request)
void	authenticationFailed(String requestId, org.elasticsearch.rest.RestRequest request)
void	authenticationFailed(String requestId, org.elasticsearch.xpack.core.security.authc.AuthenticationToken token, String action, org.elasticsearch.transport.TransportRequest transportRequest)
void	authenticationFailed(String requestId, org.elasticsearch.xpack.core.security.authc.AuthenticationToken token, org.elasticsearch.rest.RestRequest request)
void	authenticationSuccess(String requestId, org.elasticsearch.xpack.core.security.authc.Authentication authentication, String action, org.elasticsearch.transport.TransportRequest transportRequest)
void	authenticationSuccess(String requestId, org.elasticsearch.xpack.core.security.authc.Authentication authentication, org.elasticsearch.rest.RestRequest request)
void	clusterChanged(org.elasticsearch.cluster.ClusterChangedEvent event)
void	connectionDenied(InetAddress inetAddress, String profile, SecurityIpFilterRule rule)
void	connectionGranted(InetAddress inetAddress, String profile, SecurityIpFilterRule rule)	The AuditTrail.connectionGranted(InetAddress, String, SecurityIpFilterRule) and AuditTrail.connectionDenied(InetAddress, String, SecurityIpFilterRule) methods do not have a requestId because they related to a potentially long-lived TCP connection, not a single request.
void	coordinatingActionResponse(String requestId, org.elasticsearch.xpack.core.security.authc.Authentication authentication, String action, org.elasticsearch.transport.TransportRequest transportRequest, org.elasticsearch.transport.TransportResponse transportResponse)
void	explicitIndexAccessEvent(String requestId, AuditLevel eventType, org.elasticsearch.xpack.core.security.authc.Authentication authentication, String action, String index, String requestName, InetSocketAddress remoteAddress, org.elasticsearch.xpack.core.security.authz.AuthorizationEngine.AuthorizationInfo authorizationInfo)	This is a "workaround" method to log index "access_granted" and "access_denied" events for actions not tied to a TransportMessage, or when the connection is not 1:1, i.e.
String	name()
static void	registerSettings(List<org.elasticsearch.common.settings.Setting<?>> settings)
void	runAsDenied(String requestId, org.elasticsearch.xpack.core.security.authc.Authentication authentication, String action, org.elasticsearch.transport.TransportRequest transportRequest, org.elasticsearch.xpack.core.security.authz.AuthorizationEngine.AuthorizationInfo authorizationInfo)
void	runAsDenied(String requestId, org.elasticsearch.xpack.core.security.authc.Authentication authentication, org.elasticsearch.rest.RestRequest request, org.elasticsearch.xpack.core.security.authz.AuthorizationEngine.AuthorizationInfo authorizationInfo)
void	runAsGranted(String requestId, org.elasticsearch.xpack.core.security.authc.Authentication authentication, String action, org.elasticsearch.transport.TransportRequest transportRequest, org.elasticsearch.xpack.core.security.authz.AuthorizationEngine.AuthorizationInfo authorizationInfo)
void	tamperedRequest(String requestId, String action, org.elasticsearch.transport.TransportRequest transportRequest)
void	tamperedRequest(String requestId, org.elasticsearch.rest.RestRequest request)
void	tamperedRequest(String requestId, org.elasticsearch.xpack.core.security.authc.Authentication authentication, String action, org.elasticsearch.transport.TransportRequest transportRequest)

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Field Details

REST_ORIGIN_FIELD_VALUE

public static final String REST_ORIGIN_FIELD_VALUE

See Also:

• Constant Field Values

LOCAL_ORIGIN_FIELD_VALUE

public static final String LOCAL_ORIGIN_FIELD_VALUE

See Also:

• Constant Field Values

TRANSPORT_ORIGIN_FIELD_VALUE

public static final String TRANSPORT_ORIGIN_FIELD_VALUE

See Also:

• Constant Field Values

IP_FILTER_ORIGIN_FIELD_VALUE

public static final String IP_FILTER_ORIGIN_FIELD_VALUE

See Also:

• Constant Field Values

SECURITY_CHANGE_ORIGIN_FIELD_VALUE

public static final String SECURITY_CHANGE_ORIGIN_FIELD_VALUE

See Also:

• Constant Field Values

LOG_TYPE

public static final String LOG_TYPE

See Also:

• Constant Field Values

TIMESTAMP

public static final String TIMESTAMP

See Also:

• Constant Field Values

ORIGIN_TYPE_FIELD_NAME

public static final String ORIGIN_TYPE_FIELD_NAME

See Also:

• Constant Field Values

ORIGIN_ADDRESS_FIELD_NAME

public static final String ORIGIN_ADDRESS_FIELD_NAME

See Also:

• Constant Field Values

NODE_NAME_FIELD_NAME

public static final String NODE_NAME_FIELD_NAME

See Also:

• Constant Field Values

NODE_ID_FIELD_NAME

public static final String NODE_ID_FIELD_NAME

See Also:

• Constant Field Values

HOST_ADDRESS_FIELD_NAME

public static final String HOST_ADDRESS_FIELD_NAME

See Also:

• Constant Field Values

HOST_NAME_FIELD_NAME

public static final String HOST_NAME_FIELD_NAME

See Also:

• Constant Field Values

CLUSTER_NAME_FIELD_NAME

public static final String CLUSTER_NAME_FIELD_NAME

See Also:

• Constant Field Values

CLUSTER_UUID_FIELD_NAME

public static final String CLUSTER_UUID_FIELD_NAME

See Also:

• Constant Field Values

EVENT_TYPE_FIELD_NAME

public static final String EVENT_TYPE_FIELD_NAME

See Also:

• Constant Field Values

EVENT_ACTION_FIELD_NAME

public static final String EVENT_ACTION_FIELD_NAME

See Also:

• Constant Field Values

PRINCIPAL_FIELD_NAME

public static final String PRINCIPAL_FIELD_NAME

See Also:

• Constant Field Values

PRINCIPAL_RUN_BY_FIELD_NAME

public static final String PRINCIPAL_RUN_BY_FIELD_NAME

See Also:

• Constant Field Values

PRINCIPAL_RUN_AS_FIELD_NAME

public static final String PRINCIPAL_RUN_AS_FIELD_NAME

See Also:

• Constant Field Values

PRINCIPAL_REALM_FIELD_NAME

public static final String PRINCIPAL_REALM_FIELD_NAME

See Also:

• Constant Field Values

PRINCIPAL_RUN_BY_REALM_FIELD_NAME

public static final String PRINCIPAL_RUN_BY_REALM_FIELD_NAME

See Also:

• Constant Field Values

PRINCIPAL_RUN_AS_REALM_FIELD_NAME

public static final String PRINCIPAL_RUN_AS_REALM_FIELD_NAME

See Also:

• Constant Field Values

API_KEY_ID_FIELD_NAME

public static final String API_KEY_ID_FIELD_NAME

See Also:

• Constant Field Values

API_KEY_NAME_FIELD_NAME

public static final String API_KEY_NAME_FIELD_NAME

See Also:

• Constant Field Values

SERVICE_TOKEN_NAME_FIELD_NAME

public static final String SERVICE_TOKEN_NAME_FIELD_NAME

See Also:

• Constant Field Values

SERVICE_TOKEN_TYPE_FIELD_NAME

public static final String SERVICE_TOKEN_TYPE_FIELD_NAME

See Also:

• Constant Field Values

PRINCIPAL_ROLES_FIELD_NAME

public static final String PRINCIPAL_ROLES_FIELD_NAME

See Also:

• Constant Field Values

AUTHENTICATION_TYPE_FIELD_NAME

public static final String AUTHENTICATION_TYPE_FIELD_NAME

See Also:

• Constant Field Values

REALM_FIELD_NAME

public static final String REALM_FIELD_NAME

See Also:

• Constant Field Values

URL_PATH_FIELD_NAME

public static final String URL_PATH_FIELD_NAME

See Also:

• Constant Field Values

URL_QUERY_FIELD_NAME

public static final String URL_QUERY_FIELD_NAME

See Also:

• Constant Field Values

REQUEST_METHOD_FIELD_NAME

public static final String REQUEST_METHOD_FIELD_NAME

See Also:

• Constant Field Values

REQUEST_BODY_FIELD_NAME

public static final String REQUEST_BODY_FIELD_NAME

See Also:

• Constant Field Values

REQUEST_ID_FIELD_NAME

public static final String REQUEST_ID_FIELD_NAME

See Also:

• Constant Field Values

ACTION_FIELD_NAME

public static final String ACTION_FIELD_NAME

See Also:

• Constant Field Values

INDICES_FIELD_NAME

public static final String INDICES_FIELD_NAME

See Also:

• Constant Field Values

REQUEST_NAME_FIELD_NAME

public static final String REQUEST_NAME_FIELD_NAME

See Also:

• Constant Field Values

TRANSPORT_PROFILE_FIELD_NAME

public static final String TRANSPORT_PROFILE_FIELD_NAME

See Also:

• Constant Field Values

RULE_FIELD_NAME

public static final String RULE_FIELD_NAME

See Also:

• Constant Field Values

OPAQUE_ID_FIELD_NAME

public static final String OPAQUE_ID_FIELD_NAME

See Also:

• Constant Field Values

TRACE_ID_FIELD_NAME

public static final String TRACE_ID_FIELD_NAME

See Also:

• Constant Field Values

X_FORWARDED_FOR_FIELD_NAME

public static final String X_FORWARDED_FOR_FIELD_NAME

See Also:

• Constant Field Values

PUT_CONFIG_FIELD_NAME

public static final String PUT_CONFIG_FIELD_NAME

See Also:

• Constant Field Values

DELETE_CONFIG_FIELD_NAME

public static final String DELETE_CONFIG_FIELD_NAME

See Also:

• Constant Field Values

CHANGE_CONFIG_FIELD_NAME

public static final String CHANGE_CONFIG_FIELD_NAME

See Also:

• Constant Field Values

CREATE_CONFIG_FIELD_NAME

public static final String CREATE_CONFIG_FIELD_NAME

See Also:

• Constant Field Values

INVALIDATE_API_KEYS_FIELD_NAME

public static final String INVALIDATE_API_KEYS_FIELD_NAME

See Also:

• Constant Field Values

NAME

public static final String NAME

See Also:

• Constant Field Values

EMIT_HOST_ADDRESS_SETTING

public static final org.elasticsearch.common.settings.Setting<Boolean> EMIT_HOST_ADDRESS_SETTING

EMIT_HOST_NAME_SETTING

public static final org.elasticsearch.common.settings.Setting<Boolean> EMIT_HOST_NAME_SETTING

EMIT_NODE_NAME_SETTING

public static final org.elasticsearch.common.settings.Setting<Boolean> EMIT_NODE_NAME_SETTING

EMIT_NODE_ID_SETTING

public static final org.elasticsearch.common.settings.Setting<Boolean> EMIT_NODE_ID_SETTING

EMIT_CLUSTER_NAME_SETTING

public static final org.elasticsearch.common.settings.Setting<Boolean> EMIT_CLUSTER_NAME_SETTING

EMIT_CLUSTER_UUID_SETTING

public static final org.elasticsearch.common.settings.Setting<Boolean> EMIT_CLUSTER_UUID_SETTING

INCLUDE_EVENT_SETTINGS

public static final org.elasticsearch.common.settings.Setting<List<String>> INCLUDE_EVENT_SETTINGS

EXCLUDE_EVENT_SETTINGS

public static final org.elasticsearch.common.settings.Setting<List<String>> EXCLUDE_EVENT_SETTINGS

INCLUDE_REQUEST_BODY

public static final org.elasticsearch.common.settings.Setting<Boolean> INCLUDE_REQUEST_BODY

SECURITY_CHANGE_ACTIONS

public static final Set<String> SECURITY_CHANGE_ACTIONS

FILTER_POLICY_IGNORE_PRINCIPALS

protected static final org.elasticsearch.common.settings.Setting.AffixSetting<List<String>> FILTER_POLICY_IGNORE_PRINCIPALS

FILTER_POLICY_IGNORE_REALMS

protected static final org.elasticsearch.common.settings.Setting.AffixSetting<List<String>> FILTER_POLICY_IGNORE_REALMS

FILTER_POLICY_IGNORE_ROLES

protected static final org.elasticsearch.common.settings.Setting.AffixSetting<List<String>> FILTER_POLICY_IGNORE_ROLES

FILTER_POLICY_IGNORE_INDICES

protected static final org.elasticsearch.common.settings.Setting.AffixSetting<List<String>> FILTER_POLICY_IGNORE_INDICES

FILTER_POLICY_IGNORE_ACTIONS

protected static final org.elasticsearch.common.settings.Setting.AffixSetting<List<String>> FILTER_POLICY_IGNORE_ACTIONS

Constructor Details

LoggingAuditTrail

public LoggingAuditTrail(org.elasticsearch.common.settings.Settings settings,
 org.elasticsearch.cluster.service.ClusterService clusterService,
 org.elasticsearch.threadpool.ThreadPool threadPool)

Method Details

name

public String name()

Specified by:

name in interface AuditTrail

authenticationSuccess

public void authenticationSuccess(String requestId,
 org.elasticsearch.xpack.core.security.authc.Authentication authentication,
 org.elasticsearch.rest.RestRequest request)

Specified by:

authenticationSuccess in interface AuditTrail

authenticationSuccess

public void authenticationSuccess(String requestId,
 org.elasticsearch.xpack.core.security.authc.Authentication authentication,
 String action,
 org.elasticsearch.transport.TransportRequest transportRequest)

Specified by:

authenticationSuccess in interface AuditTrail

anonymousAccessDenied

public void anonymousAccessDenied(String requestId,
 String action,
 org.elasticsearch.transport.TransportRequest transportRequest)

Specified by:

anonymousAccessDenied in interface AuditTrail

anonymousAccessDenied

public void anonymousAccessDenied(String requestId,
 org.elasticsearch.rest.RestRequest request)

Specified by:

anonymousAccessDenied in interface AuditTrail

authenticationFailed

public void authenticationFailed(String requestId,
 org.elasticsearch.xpack.core.security.authc.AuthenticationToken token,
 String action,
 org.elasticsearch.transport.TransportRequest transportRequest)

Specified by:

authenticationFailed in interface AuditTrail

authenticationFailed

public void authenticationFailed(String requestId,
 org.elasticsearch.rest.RestRequest request)

Specified by:

authenticationFailed in interface AuditTrail

authenticationFailed

public void authenticationFailed(String requestId,
 String action,
 org.elasticsearch.transport.TransportRequest transportRequest)

Specified by:

authenticationFailed in interface AuditTrail

authenticationFailed

public void authenticationFailed(String requestId,
 org.elasticsearch.xpack.core.security.authc.AuthenticationToken token,
 org.elasticsearch.rest.RestRequest request)

Specified by:

authenticationFailed in interface AuditTrail

authenticationFailed

public void authenticationFailed(String requestId,
 String realm,
 org.elasticsearch.xpack.core.security.authc.AuthenticationToken token,
 String action,
 org.elasticsearch.transport.TransportRequest transportRequest)

Specified by:

authenticationFailed in interface AuditTrail

authenticationFailed

public void authenticationFailed(String requestId,
 String realm,
 org.elasticsearch.xpack.core.security.authc.AuthenticationToken token,
 org.elasticsearch.rest.RestRequest request)

Specified by:

authenticationFailed in interface AuditTrail

accessGranted

public void accessGranted(String requestId,
 org.elasticsearch.xpack.core.security.authc.Authentication authentication,
 String action,
 org.elasticsearch.transport.TransportRequest msg,
 org.elasticsearch.xpack.core.security.authz.AuthorizationEngine.AuthorizationInfo authorizationInfo)

Specified by:

accessGranted in interface AuditTrail

explicitIndexAccessEvent

public void explicitIndexAccessEvent(String requestId,
 AuditLevel eventType,
 org.elasticsearch.xpack.core.security.authc.Authentication authentication,
 String action,
 String index,
 String requestName,
 InetSocketAddress remoteAddress,
 org.elasticsearch.xpack.core.security.authz.AuthorizationEngine.AuthorizationInfo authorizationInfo)

Description copied from interface: AuditTrail

This is a "workaround" method to log index "access_granted" and "access_denied" events for actions not tied to a TransportMessage, or when the connection is not 1:1, i.e. several audit events for an action associated with the same message. It is currently only used to audit the resolved index (alias) name for each BulkItemRequest comprised by a BulkShardRequest. We should strive to not use this and TODO refactor it out!

Specified by:

explicitIndexAccessEvent in interface AuditTrail

accessDenied

public void accessDenied(String requestId,
 org.elasticsearch.xpack.core.security.authc.Authentication authentication,
 String action,
 org.elasticsearch.transport.TransportRequest transportRequest,
 org.elasticsearch.xpack.core.security.authz.AuthorizationEngine.AuthorizationInfo authorizationInfo)

Specified by:

accessDenied in interface AuditTrail

tamperedRequest

public void tamperedRequest(String requestId,
 org.elasticsearch.rest.RestRequest request)

Specified by:

tamperedRequest in interface AuditTrail

tamperedRequest

public void tamperedRequest(String requestId,
 String action,
 org.elasticsearch.transport.TransportRequest transportRequest)

Specified by:

tamperedRequest in interface AuditTrail

tamperedRequest

public void tamperedRequest(String requestId,
 org.elasticsearch.xpack.core.security.authc.Authentication authentication,
 String action,
 org.elasticsearch.transport.TransportRequest transportRequest)

Specified by:

tamperedRequest in interface AuditTrail

connectionGranted

public void connectionGranted(InetAddress inetAddress,
 String profile,
 SecurityIpFilterRule rule)

Description copied from interface: AuditTrail

The AuditTrail.connectionGranted(InetAddress, String, SecurityIpFilterRule) and AuditTrail.connectionDenied(InetAddress, String, SecurityIpFilterRule) methods do not have a requestId because they related to a potentially long-lived TCP connection, not a single request. For both Transport and Rest connections, a single connection granted/denied event is generated even if that connection is used for multiple Elasticsearch actions (potentially as different users)

Specified by:

connectionGranted in interface AuditTrail

connectionDenied

public void connectionDenied(InetAddress inetAddress,
 String profile,
 SecurityIpFilterRule rule)

Specified by:

connectionDenied in interface AuditTrail

runAsGranted

public void runAsGranted(String requestId,
 org.elasticsearch.xpack.core.security.authc.Authentication authentication,
 String action,
 org.elasticsearch.transport.TransportRequest transportRequest,
 org.elasticsearch.xpack.core.security.authz.AuthorizationEngine.AuthorizationInfo authorizationInfo)

Specified by:

runAsGranted in interface AuditTrail

runAsDenied

public void runAsDenied(String requestId,
 org.elasticsearch.xpack.core.security.authc.Authentication authentication,
 String action,
 org.elasticsearch.transport.TransportRequest transportRequest,
 org.elasticsearch.xpack.core.security.authz.AuthorizationEngine.AuthorizationInfo authorizationInfo)

Specified by:

runAsDenied in interface AuditTrail

runAsDenied

public void runAsDenied(String requestId,
 org.elasticsearch.xpack.core.security.authc.Authentication authentication,
 org.elasticsearch.rest.RestRequest request,
 org.elasticsearch.xpack.core.security.authz.AuthorizationEngine.AuthorizationInfo authorizationInfo)

Specified by:

runAsDenied in interface AuditTrail

coordinatingActionResponse

public void coordinatingActionResponse(String requestId,
 org.elasticsearch.xpack.core.security.authc.Authentication authentication,
 String action,
 org.elasticsearch.transport.TransportRequest transportRequest,
 org.elasticsearch.transport.TransportResponse transportResponse)

Specified by:

coordinatingActionResponse in interface AuditTrail

registerSettings

public static void registerSettings(List<org.elasticsearch.common.settings.Setting<?>> settings)

clusterChanged

public void clusterChanged(org.elasticsearch.cluster.ClusterChangedEvent event)

Specified by:

clusterChanged in interface org.elasticsearch.cluster.ClusterStateListener