github-mirrors/kibana
1
0
Fork 0
mirror of https://github.com/elastic/kibana.git synced 2025-04-23 17:28:26 -04:00
Code Issues Projects Releases Packages Wiki Activity

[docs] Adds Knowledge Base audit logs to audit events (#214809)

Browse source 
## Summary
Part of https://github.com/elastic/docs-content/issues/280. More info
here: https://github.com/elastic/security-team/issues/11367
Minor docs update, updates the sections where the new audit events for
AI Assistant Knowledge Base actions appear. If this is approved, a
similar change should be applied to the 9.0 docs.

(cherry picked from commit edd43b70e3)
This commit is contained in:
Benjamin Ironside Goldstein 2025-03-17 10:32:58 -07:00
parent 6eafb929e8
commit e628154462
1 changed files with 10 additions and 10 deletions
Download patch file Download diff file Expand all files Collapse all files

20
docs/user/security/audit-logging.asciidoc
View file

@ -152,16 +152,8 @@ Refer to the corresponding {es} logs for potential write errors.
| `unknown` | User requested to install the product documentation for use in AI Assistants.
.2+| `knowledge_base_entry_create`
| `success` | User has created knowledge base entry [id=x]
| `failure` | Failed attempt to create a knowledge base entry
.2+| `knowledge_base_entry_update`
| `success` | User has updated knowledge base entry [id=x]
| `failure` | Failed attempt to update a knowledge base entry
.2+| `knowledge_base_entry_delete`
| `success` | User has deleted knowledge base entry [id=x]
| `failure` | Failed attempt to delete a knowledge base entry
| `success` | User has created knowledge base entry [id=x].
| `failure` | Failed attempt to create a knowledge base entry.
3+a|
====== Type: change
@ -352,6 +344,10 @@ Refer to the corresponding {es} logs for potential write errors.
.1+| `product_documentation_update`
| `unknown` | User requested to update the product documentation for use in AI Assistants.
.2+| `knowledge_base_entry_update`
| `success` | User has updated knowledge base entry [id=x].
| `failure` | Failed attempt to update a knowledge base entry.
3+a|
====== Type: deletion
@ -446,6 +442,10 @@ Refer to the corresponding {es} logs for potential write errors.
.1+| `product_documentation_delete`
| `unknown` | User requested to delete the product documentation for use in AI Assistants.
.2+| `knowledge_base_entry_delete`
| `success` | User has deleted knowledge base entry [id=x].
| `failure` | Failed attempt to delete a knowledge base entry.
3+a|
====== Type: access