Built-in Indexes

Built-in indexes are pre-configured collections of logs that automatically organize specific types of system-generated data for easy access and analysis.

Unlike custom indexes you might create, these indexes—such as _audit—are included out of the box to capture critical operational, security, and performance information.

They provide a foundation for monitoring user actions, tracking system events, and debugging workflows without requiring additional setup.