How To Solve Issues Related to Log – Failed to index audit event: authenticationsuccess

How To Solve Issues Related to Log – Failed to index audit event: authenticationsuccess

Updated: Jan-20

Elasticsearch Version: 1.7-8.0

Background

Before you begin reading this guide try our beta Elasticsearch Health Check-Up it analyses JSON’s to provide personalized recommendations that can improve your clusters performance.


To troubleshoot log “Failed to index audit event: authenticationsuccess” it’s important to understand a few problems related to Elasticsearch concepts index, plugin. See bellow important tips and explanations on these concepts

Log Context

Log”Failed to index audit event: [authentication_success]” classname is IndexAuditTrail.java
We extracted the following from Elasticsearch source code for those seeking an in-depth context :

     public void authenticationSuccess(String requestId; String realm; User user; RestRequest request) {
        if (events.contains(AUTHENTICATION_SUCCESS)) {
            try {
                enqueue(message("authentication_success"; new Tuple(realm; realm); user; null; request); "authentication_success");
            } catch (final Exception e) {
                logger.warn("failed to index audit event: [authentication_success]"; e);
            }
        }
    }

    
Override



Related issues to this log

We have gathered selected Q&A from the community and issues from Github, that can help fix related issues please review the following for further information :

1 Windows event log Logstash and Elasticsearch filter doesn’t work

0.66 K 

Log Users And Query In Audit Log  

About Opster

Opster detects root causes of Elasticsearch problems, provides automated recommendations and can perform various actions to prevent issues and optimize performance

Find Configuration Errors

Analyze Now