Identify Cockpit user who terminated a process

Is there any default logging which would identify which logged-in user terminated a process via the Cockpit?

There is indeed.
The user operations log would have that information. You can access it via the rest api

2 Likes