Kibana audit logging records who did what inside Kibana. It tracks every time someone creates, reads, updates, or deletes a saved object like a dashboard or visualization. It also tracks logins and logouts and changes to spaces.
This is useful for security teams who need to monitor user activity. It helps with compliance audits and finding the cause of unexpected changes. You can filter out noisy events and send the logs to Elasticsearch for unified search.
To use it, you need a gold or higher license and access to the Kibana configuration file. The logs share the same format as Elasticsearch audit logs, so you can correlate them using a trace ID.
Global
mkdir -p ~/.claude/skills/kibana-auditProject
mkdir -p .claude/skills/kibana-auditSource Repository
Azure Compliancemicrosoft/azure-skills
Audit Azure compliance and Key Vault expiration with azqr scans
Firebase Security Rules Auditorfirebase/agent-skills
Find weak spots in Firestore rules and get clear fixes
Golang Securitysamber/cc-skills-golang
Find and fix security flaws in Go code using expert guidance and automated tools
Clerk Nextjs Patternsclerk/skills
Secure your Next.js app with Clerk middleware, server actions, and caching
Persona It Admingoogleworkspace/cli
Keep your digital workspace safe with IT admin security workflows
Two Factor Authentication Best Practicesbetter-auth/skills
Secure user logins with two-factor authentication using Better Auth
Gws Modelarmor Create Templategoogleworkspace/cli
Create new templates for Google Model Armor to protect AI apps from harmful content
Gws Modelarmor Sanitize Promptgoogleworkspace/cli
Clean user prompts safely with Google Model Armor templates