Question

How to check if the access token is updated with the refresh token for a particular Public API client in Kibana?

Answer

All refresh token events will be available in the logs via the following search query (make sure to set the desired time period):
"auth2/{tenant_id}/connect/token" and "refresh_token" and "{client_id}"

Please see the example below:

When the result message is expanded, the "log" and "message" fields will contain the information if an access token was updated successfully with the refresh token or not.