[
https://issues.apache.org/jira/browse/RANGER-3257?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17342423#comment-17342423
]
Nitin Galave edited comment on RANGER-3257 at 5/11/21, 8:54 AM:
----------------------------------------------------------------
Committed to
[apache-master|https://github.com/apache/ranger/commit/fb00ef4a2d794c0d837702a3817cc14aa69b1920]
branch.
Committed to
[ranger-2.2|https://github.com/apache/ranger/commit/62c9aeca807bd056c69a4b902db32a962c13590a]
branch.
was (Author: nitin.galave):
Committed to
[apache-master|https://github.com/apache/ranger/commit/fb00ef4a2d794c0d837702a3817cc14aa69b1920]
branch.
Committed to
[ranger-2.2|https://github.com/apache/ranger/commit/62c9aeca807bd056c69a4b902db32a962c13590a]
branch.
> Update default kafka audit filters to filter out unwanted audits
> ----------------------------------------------------------------
>
> Key: RANGER-3257
> URL: https://issues.apache.org/jira/browse/RANGER-3257
> Project: Ranger
> Issue Type: Improvement
> Components: audit
> Affects Versions: 2.2.0
> Reporter: Abhishek Shukla
> Assignee: Mateen Mansoori
> Priority: Major
>
> Can we update the default Kafka audit filters as follows:
> This will filter out Kafka audits related to ATLAS_SPARK_HOOK, topic describe
> action, etc
> {code:java}
> [
> {
> "accessResult":"DENIED",
> "isAudited":true
> },
> {
> "resources":{
> "topic":{
> "values":[
> "ATLAS_ENTITIES",
> "ATLAS_HOOK",
> "ATLAS_SPARK_HOOK"
> ]
> }
> },
> "users":[
> "atlas"
> ],
> "actions":[
> "describe",
> "publish",
> "consume"
> ],
> "isAudited":false
> },
> {
> "resources":{
> "topic":{
> "values":[
> "ATLAS_HOOK"
> ]
> }
> },
> "users":[
> "hive",
> "hbase",
> "impala",
> "nifi"
> ],
> "actions":[
> "publish",
> "describe"
> ],
> "isAudited":false
> },
> {
> "resources":{
> "topic":{
> "values":[
> "ATLAS_ENTITIES"
> ]
> }
> },
> "users":[
> "rangertagsync"
> ],
> "actions":[
> "consume",
> "describe"
> ],
> "isAudited":false
> },
> {
> "resources":{
> "consumergroup":{
> "values":[
> "*"
> ]
> }
> },
> "users":[
> "atlas",
> "rangertagsync"
> ],
> "actions":[
> "consume"
> ],
> "isAudited":false
> },
> {
> "users":[
> "kafka"
> ],
> "isAudited":false
> }
> ]
> {code}
> cc [~dineshkumar-yadav]
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
