Custom Kibana Audit URL

Configure a custom Kibana URL for viewing audit logs from DuploCloud

DuploCloud provides a default Kibana URL for viewing audit logs, but if you want to update filters or customize further, you can override the default with these settings.

Configuring a Custom Kibana Audit URL

1. Log in to the DuploCloud Portal.

2. Navigate to Administrator -> System Settings -> System Config.

3. Click Add. The Add Config pane displays.

   

   The Add Config pane
4. In the Config Type list box, select AppConfig.

5. In the Key list box, choose one of the following keys:

   • Kibana Base URL: This URL points to the proxy or direct-access Kibana instance.

   • Kibana Audit URL Template: This URL template links to Kibana’s Audit logs.

6. In the Value field, enter the custom URL for the selected key. For example:

   • For Kibana Base URL: /proxy/kibana

   • For Kibana Audit URL Template: https://kibana.example.com/app/discover#/?_a=(query:(language:kuery,query:'log_type:"audit"'))&_g=(time:(from:now-1h,to:now))

You can customize the example URLs, replacing placeholders with your own values and modifying the query string to adjust the filters:

• log_type: Filter by log type (e.g., "audit", "application").

• time range: Adjust the time range (e.g., from:now-1h, from:now-7d).

Example: https://kibana.example.com/app/discover#/?_a=(query:(language:kuery,query:'log_type:"audit"'))&_g=(time:(from:now-1h,to:now))

1. Click Submit to save the configuration.

The System Config page in the DuploCloud Platform

After configuring the Kibana URL in DuploCloud, you can access Kibana Audit data directly from the DuploCloud Portal:

• Navigate to Administrator -> Observability -> Audit.