Change elasticsearch serilog sink http content header
I hope following code helps identifying whats going wrong
ModifyConnectionSettings = x => x.OnRequestCompleted(ELKReqCompleted); void ELKReqCompleted(IApiCallDetails apiCallDetails) { //apiCallDetails.AuditTrail //apiCallDetails.DebugInformation }