[ https://issues.apache.org/jira/browse/RANGER-1310?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15861973#comment-15861973 ]
Ramesh Mani commented on RANGER-1310: ------------------------------------- commit link http://git-wip-us.apache.org/repos/asf/ranger/commit/543b591d > Ranger Audit framework enhancement to provide an option to allow audit > records to be spooled to local disk first before sending it to destinations > --------------------------------------------------------------------------------------------------------------------------------------------------- > > Key: RANGER-1310 > URL: https://issues.apache.org/jira/browse/RANGER-1310 > Project: Ranger > Issue Type: Bug > Reporter: Ramesh Mani > Assignee: Ramesh Mani > > Ranger Audit framework enhancement to provide an option to allow audit > records to be spooled to local disk first before sending it to destinations. > xasecure.audit.provider.filecache.is.enabled = true ==> This will enable > this functionality of AuditFileCacheProivder to log the audits locally in a > file. > xasecure.audit.provider.filecache.filespool.file.rollover.sec = \{rollover > time - default is 1 day\} ==> this provides time to send the audit records > from local to destination and flush the pipe. > xasecure.audit.provider.filecache.filespool.dir=/var/log/hadoop/hdfs/audit/spool > ==> provides the directory where the Audit FileSpool cache is present. > This helps in avoiding missing / partial audit records in the hdfs > destination which may happen randomly due to restart of respective plugin > components. -- This message was sent by Atlassian JIRA (v6.3.15#6346)