Export the Logit.io audit log and keep it searchable in OpenSearch
When a parser breaks at 10:06, the first question is who changed what at 10:05. Every Logit.io Logs stack keeps an audit log that answers it, with the user, the IP address and the action. This guide shows how to read and export it, how to pull it from the Dashboard API, and how to ship it with Filebeat into logstash-* so it sits on the same OpenSearch Dashboards timeline as your application logs. Contents.