Describe the issue:
Cannot figure out how to disable and remove the audit logs.
does anyone know how to disable the audit log in opensearch? I have found plenty of documentation on enabling it, but nothing on how to disable it. is removing plugins.security.audit.type: internal_opensearch sufficient? what about unticking the enable audit logging check box in opensearch dashboards? and does that still work even if the plugins.security.audit.type: internal_opensearch setting is still present in the opensearch.yaml?
after disabling how do you remove all the indexes? manually remove them via opensearch dashboards? do you need to close them first?
@jgrammen-agilitypr The audit logging is disabled by default and the documentation describes how to enable it.
Removing plugins.security.audit.type: internal_opensearch from opensearch.yml or switching off Enable audit logging check box in Opensearch Dashboards will disable audit logs.
I’ve just created a pull request in OpenSearch documentation.