NSP application log forwarding to OpenSearch

Description

By default, the NSP is configured to forward NSP application logs to the internal OpenSearch engine, which makes the information available in an OpenSearch Dashboards view available from the NSP Log Viewer.

NSP application log forwarding to OpenSearch is configurable in the nspmodulesloggingforwardingapplicationLogsopensearch section of the NSP configuration file.

Note: OpenSearch-Dashboards access requires NSP user credentials.

Audit logs in OpenSearch

NSP supports for audit logging in OpenSearch to enhance security, compliance, and traceability. This feature captures and records security-related events in the OpenSearch cluster, which enables operational visibility and forensic analysis. The audit capability helps identify who performed actions, where, and when, which support regulatory compliance, operational monitoring, and incident investigations.

See “What are OpenSearch audit logs?” and “How do I enable OpenSearch audit logging?” in the NSP System Administrator Guide for information.