Monitor deletions and channel updates/deletions still do not appear in the log

Plugins Alerting
1

Versions (relevant - OpenSearch/Dashboard/Server OS/Browser): OpenSearch and OpenSearch Dashboard version is 2.18.0

Describe the issue:I’m using the OpenSearch Dashboards UI to create, update, and delete monitors via Alerting → Monitor. While monitor creation and update actions are clearly logged in the OpenSearch log file with entries like:

  • Creating monitor:

  • Updating monitor to:

…there is no corresponding log entry for monitor deletions. I expect to see something like Deleting monitor: or Deleted monitor: , but nothing appears.

Similarly, under Notifications → Channel, I can create, update, and delete channels, but the logs only show:

  • notifications:NotificationConfig-create

  • notifications:NotificationConfig-info

There are no logs for channel updates or deletions, which makes tracking changes difficult

Configuration: I tried below cofiguration in security files:

config:
enabled: true

audit:
enable_rest: true
enable_transport: true
disabled_rest_categories: [ ]
disabled_transport_categories: [ ]
ignore_users: [ ]
ignore_requests: [ ]

[ ] represent NONE or empty list

In opensearch.yml

plugins.security.audit.config.enable_rest: true
plugins.security.audit.config.enable_transport: true
plugins.security.audit.config.disabled_rest_categories: NONE
plugins.security.audit.config.disabled_transport_categories: NONE
plugins.security.audit.config.log_request_body: true
plugins.security.audit.config.resolve_bulk_requests: true

Relevant Logs or Screenshots: After applying the above configuration, I confirmed that audit logging is active. The logs changed from:

Auditing on REST API is disabled.
Auditing on Transport API is disabled.
Auditing of request body is enabled.

to

Auditing on REST API is enabled.
Auditing on Transport API is enabled.
Auditing of request body is enabled.

However, monitor deletions and channel updates/deletions still do not appear in the logs.