One liner to expose the EQL query for debugging for users

elastic · May 25, 2021 · 01ee35f · 01ee35f
1 parent e2d47f7
commit 01ee35f
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/x-pack/plugins/security_solution/server/lib/detection_engine/signals/executors/eql.ts b/x-pack/plugins/security_solution/server/lib/detection_engine/signals/executors/eql.ts
@@ -92,6 +92,11 @@ export const eqlExecutor = async ({
     ruleParams.eventCategoryOverride
   );
   const eqlSignalSearchStart = performance.now();
+  logger.debug(
+    `EQL query request path: ${request.path}, method: ${request.method}, body: ${JSON.stringify(
+      request.body
+    )}`
+  );
   // TODO: fix this later
   const { body: response } = (await services.scopedClusterClient.asCurrentUser.transport.request(
     request