Hi all,

I'm trying to test sending audit logs to Solr from my plugin...

I verified I can get to Solr admin on
http://localhost:6083/solr/#/ranger_audits

In my ranger-nifi-audit.xml I have:

<property>
   <name>xasecure.audit.solr.is.enabled</name>
   <value>true</value>
</property>

<property>
   <name>xasecure.audit.solr.async.max.queue.size</name>
   <value>1</value>
</property>

<property>
   <name>xasecure.audit.solr.async.max.flush.interval.ms</name>
   <value>1000</value>
</property>

<property>
   <name>xasecure.audit.solr.solr_url</name>
   <value>http://localhost:6083/solr/ranger_audits</value>
</property>

Using the debugger I have verified the SolrAuditProvider connect() method
is getting called and successfully creating an HttpSolrClient.

Then I simulate an authorization request, but the log methods on
SolrAuditProvider never get called, and nothing gets sent to Solr. There
are no errors in the log.

The console prints this during initialization:

[INFO]: No v3 audit configuration found. Trying v2 audit configurations
[INFO]: SolrAuditProvider is enabled
[INFO]: AuditDestination() enter
[INFO]: init() called
[INFO]: BaseAuditProvider.init()
[INFO]: propPrefix=xasecure.audit.provider
[INFO]: Using providerName from property prefix. providerName=provider
[INFO]: providerName=provider
[INFO]: MultiDestAuditProvider: creating..
[INFO]: AsyncAuditProvider(MySolrAuditProvider): creating..
[INFO]:
MultiDestAuditProvider.addAuditProvider(providerType=org.apache.ranger.audit.provider.solr.SolrAuditProvider)
[INFO]: AsyncAuditProvider(MySolrAuditProvider).init()
[INFO]: MultiDestAuditProvider.init()
[INFO]: BaseAuditProvider.init()
[INFO]: propPrefix=xasecure.audit.provider
[INFO]: providerName=multi_dest
[INFO]: init() called
[INFO]: BaseAuditProvider.init()
[INFO]: propPrefix=xasecure.audit.provider
[INFO]: providerName=multi_dest.provider
[INFO]: ==> AsyncAuditProvider.run()

Is there anything I am missing that would stop the events from being sent
to Solr?

Thanks,

Bryan

Reply via email to