[docs] Adds Knowledge Base audit logs to audit events (#214809)

## Summary
Part of https://github.com/elastic/docs-content/issues/280. More info
here: https://github.com/elastic/security-team/issues/11367
Minor docs update, updates the sections where the new audit events for
AI Assistant Knowledge Base actions appear. If this is approved, a
similar change should be applied to the 9.0 docs.
This commit is contained in:
Benjamin Ironside Goldstein 2025-03-17 10:32:58 -07:00 committed by GitHub
parent 7cd853c255
commit edd43b70e3
No known key found for this signature in database
GPG key ID: B5690EEEBB952194

View file

@ -152,16 +152,8 @@ Refer to the corresponding {es} logs for potential write errors.
| `unknown` | User requested to install the product documentation for use in AI Assistants.
.2+| `knowledge_base_entry_create`
| `success` | User has created knowledge base entry [id=x]
| `failure` | Failed attempt to create a knowledge base entry
.2+| `knowledge_base_entry_update`
| `success` | User has updated knowledge base entry [id=x]
| `failure` | Failed attempt to update a knowledge base entry
.2+| `knowledge_base_entry_delete`
| `success` | User has deleted knowledge base entry [id=x]
| `failure` | Failed attempt to delete a knowledge base entry
| `success` | User has created knowledge base entry [id=x].
| `failure` | Failed attempt to create a knowledge base entry.
3+a|
====== Type: change
@ -352,6 +344,10 @@ Refer to the corresponding {es} logs for potential write errors.
.1+| `product_documentation_update`
| `unknown` | User requested to update the product documentation for use in AI Assistants.
.2+| `knowledge_base_entry_update`
| `success` | User has updated knowledge base entry [id=x].
| `failure` | Failed attempt to update a knowledge base entry.
3+a|
====== Type: deletion
@ -446,6 +442,10 @@ Refer to the corresponding {es} logs for potential write errors.
.1+| `product_documentation_delete`
| `unknown` | User requested to delete the product documentation for use in AI Assistants.
.2+| `knowledge_base_entry_delete`
| `success` | User has deleted knowledge base entry [id=x].
| `failure` | Failed attempt to delete a knowledge base entry.
3+a|
====== Type: access