All checks

Medium Elasticsearch · regional

Elasticsearch domains should have audit logging enabled

Confirms that Elasticsearch domains have audit logging enabled for security and compliance purposes.

service: Elasticsearch
severity: Medium
scope: evaluated in every region

How to fix it

To enable audit logging for an Elasticsearch domain, follow these steps:

Open the Amazon Elasticsearch Service console at https://console.aws.amazon.com/es/.
Choose the domain that you want to modify.
In the navigation pane, under Domain configuration, choose Audit logs.
Select Enable for Audit logs.
Choose Save changes.

See which of your accounts this check is failing on.

Book a demo