diff --git a/src/server/logging/index.js b/src/server/logging/index.js
index 2763baa462081..27b89e43bab99 100644
--- a/src/server/logging/index.js
+++ b/src/server/logging/index.js
@@ -45,10 +45,11 @@ module.exports = function (kbnServer, server, config) {
               dest: config.get('logging.dest'),
               // I'm adding the default here because if you add another filter
               // using the commandline it will remove authorization. I want users
-              // to have to explicitly set --logging.filter.authorization=none to
-              // have it show up int he logs.
+              // to have to explicitly set --logging.filter.authorization=none or
+              // --logging.filter.cookie=none to have it show up in the logs.
               filter: _.defaults(config.get('logging.filter'), {
-                authorization: 'remove'
+                authorization: 'remove',
+                cookie: 'remove'
               })
             },
             events: _.transform(events, function (filtered, val, key) {