# Exclude categories from audit log

**URL:** <https://forum.opensearch.org/t/exclude-categories-from-audit-log/12066>\
**Category:** Security\
**Created:** [January 10, 2023, 6:27pm UTC](https://forum.opensearch.org/t/exclude-categories-from-audit-log/12066 "2023-01-10T18:27:56Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![taltsafrir](https://avatars.discourse-cdn.com/v4/letter/t/a698b9/32.png) [@taltsafrir](https://forum.opensearch.org/u/taltsafrir)\
**Post date:** [January 10, 2023, 6:27pm UTC](https://forum.opensearch.org/t/exclude-categories-from-audit-log/12066/1 "2023-01-10T18:27:56Z")

</div>

hi, I saw on the documentation that I can exclude categories:

```auto
plugins.security.audit.config.disabled_rest_categories: AUTHENTICATED, opensearch_SECURITY_INDEX_ATTEMPT
plugins.security.audit.config.disabled_transport_categories: GRANTED_PRIVILEGES

```

I tried this but it’s not working, do I need to use the old format with opendistro\_?  
(im using version 2.4.0)

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [January 11, 2023, 11:04pm UTC](https://forum.opensearch.org/t/exclude-categories-from-audit-log/12066/2 "2023-01-11T23:04:52Z")

</div>

@taltsafrir Have you tried using OpenSearch Dashboards?

 ![image](https://us1.discourse-cdn.com/flex019/uploads/mauve_hedgehog/original/2X/7/7da9d00d6a1d0711e9232e1ccf2b74b2d46b2181.png)

---

<div class="post-metadata">

**Author:** ![taltsafrir](https://avatars.discourse-cdn.com/v4/letter/t/a698b9/32.png) [@taltsafrir](https://forum.opensearch.org/u/taltsafrir)\
**Post date:** [January 12, 2023, 10:10am UTC](https://forum.opensearch.org/t/exclude-categories-from-audit-log/12066/3 "2023-01-12T10:10:42Z")

</div>

hi, yes I used opensearch dashboards to change the settings, but I dont want to change them manually

---

<div class="post-metadata">

**Author:** ![pablo](https://sea1.discourse-cdn.com/flex019/user_avatar/forum.opensearch.org/pablo/32/10363_2.png) [@pablo](https://forum.opensearch.org/u/pablo)\
**Post date:** [January 16, 2023, 1:36pm UTC](https://forum.opensearch.org/t/exclude-categories-from-audit-log/12066/4 "2023-01-16T13:36:19Z")

</div>

@taltsafrir What do you mean by “manually”?  
Did Audit configuration through OpenSearch Dashboards work for you?

---

<div class="post-metadata">

**Author:** ![taltsafrir](https://avatars.discourse-cdn.com/v4/letter/t/a698b9/32.png) [@taltsafrir](https://forum.opensearch.org/u/taltsafrir)\
**Post date:** [January 16, 2023, 1:47pm UTC](https://forum.opensearch.org/t/exclude-categories-from-audit-log/12066/5 "2023-01-16T13:47:47Z")

</div>

I want to change this parameter with opensearch.yml  
through opensearch dashboards it worked