(ranger) branch master updated: RANGER-5710: Default access audit store to Solr (#1115)

[ramackri]

This is an automated email from the ASF dual-hosted git repository.

ramackri pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/ranger.git


The following commit(s) were added to refs/heads/master by this push:
     new 3c239815a RANGER-5710: Default access audit store to Solr (#1115)
3c239815a is described below

commit 3c239815aace94db4906cf5acf42e4d3877e358d
Author: Ramachandran Krishnan <ramac...@gmail.com>
AuthorDate: Wed Jul 29 10:49:15 2026 +0530

    RANGER-5710: Default access audit store to Solr (#1115)
    
    RDBMS access audit has been unsupported since RANGER-3184 (2.2.0). The RC1 
Access Audit UI
    ClassCastException occurred because ranger.audit.source.type fell back to 
DB when
    unset (RangerBizUtil default) and docker Postgres install defaulted to 
OpenSearch.
    
    - Default auditDBType in RangerBizUtil: SOLR instead of RDBMS
    - conf.dist ranger-admin-site.xml: solr instead of db
    - Docker Postgres install.properties: audit_store=solr (OpenSearch 
commented)
    
    Co-authored-by: ramk <r...@cloudera.com>
---
 .../admin/ranger-admin-install-postgres.properties | 22 +++++++++++-----------
 .../java/org/apache/ranger/biz/RangerBizUtil.java  |  2 +-
 .../main/resources/conf.dist/ranger-admin-site.xml |  2 +-
 3 files changed, 13 insertions(+), 13 deletions(-)

diff --git 
a/dev-support/ranger-docker/scripts/admin/ranger-admin-install-postgres.properties
 
b/dev-support/ranger-docker/scripts/admin/ranger-admin-install-postgres.properties
index 80c18df4e..0b1d3f560 100644
--- 
a/dev-support/ranger-docker/scripts/admin/ranger-admin-install-postgres.properties
+++ 
b/dev-support/ranger-docker/scripts/admin/ranger-admin-install-postgres.properties
@@ -46,10 +46,10 @@ keyadmin_password=rangerR0cks!
 ## --- Audit store: enable ONE of the following blocks ---
 
 ## Option 1: Solr (default)
-# audit_store=solr
+audit_store=solr
 # FQDN required for SPNEGO to Solr (HTTP/ranger-solr.rangernw@REALM)
-# audit_solr_urls=http://ranger-solr.rangernw:8983/solr/ranger_audits
-# audit_solr_collection_name=ranger_audits
+audit_solr_urls=http://ranger-solr.rangernw:8983/solr/ranger_audits
+audit_solr_collection_name=ranger_audits
 
 ## Option 2: OpenSearch / Elasticsearch (legacy - uses ES HighLevel REST 
Client)
 # audit_store=elasticsearch
@@ -62,14 +62,14 @@ keyadmin_password=rangerR0cks!
 # audit_elasticsearch_bootstrap_enabled=true
 
 ## Option 3: OpenSearch (native - uses low-level REST client, works with any 
OpenSearch version)
-audit_store=opensearch
-audit_opensearch_urls=ranger-opensearch
-audit_opensearch_port=9200
-audit_opensearch_protocol=http
-audit_opensearch_user=admin
-audit_opensearch_password=admin
-audit_opensearch_index=ranger_audits
-audit_opensearch_bootstrap_enabled=true
+# audit_store=opensearch
+# audit_opensearch_urls=ranger-opensearch
+# audit_opensearch_port=9200
+# audit_opensearch_protocol=http
+# audit_opensearch_user=admin
+# audit_opensearch_password=admin
+# audit_opensearch_index=ranger_audits
+# audit_opensearch_bootstrap_enabled=true
 
 policymgr_external_url=http://ranger-admin:6080
 policymgr_http_enabled=true
diff --git 
a/security-admin/src/main/java/org/apache/ranger/biz/RangerBizUtil.java 
b/security-admin/src/main/java/org/apache/ranger/biz/RangerBizUtil.java
index 0fa8910d6..2c2b665ca 100644
--- a/security-admin/src/main/java/org/apache/ranger/biz/RangerBizUtil.java
+++ b/security-admin/src/main/java/org/apache/ranger/biz/RangerBizUtil.java
@@ -130,7 +130,7 @@ public class RangerBizUtil {
     Set<Class<?>> groupEditableClasses;
     int           maxDisplayNameLength = 150;
     boolean       enableResourceAccessControl;
-    String        auditDBType = AUDIT_STORE_RDBMS;
+    String        auditDBType = AUDIT_STORE_SOLR;
 
     public RangerBizUtil() {
         RangerAdminConfig config = RangerAdminConfig.getInstance();
diff --git a/security-admin/src/main/resources/conf.dist/ranger-admin-site.xml 
b/security-admin/src/main/resources/conf.dist/ranger-admin-site.xml
index 460c567e8..5493b69ba 100644
--- a/security-admin/src/main/resources/conf.dist/ranger-admin-site.xml
+++ b/security-admin/src/main/resources/conf.dist/ranger-admin-site.xml
@@ -141,7 +141,7 @@
        </property>
        <property>
                <name>ranger.audit.source.type</name>
-               <value>db</value>
+               <value>solr</value>
                <description></description>
        </property>