[
https://issues.apache.org/jira/browse/RANGER-1310?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ramesh Mani updated RANGER-1310:
--------------------------------
Description:
Ranger Audit framework enhancement to provide an option to allow audit records
to be spooled to local disk first before sending it to destinations.
xasecure.audit.provider.filecache.is.enabled = true ==> This will enable this
functionality of AuditFileCacheProivder to log the audits locally in a file.
xasecure.audit.provider.filecache.filespool.file.rollover.sec = \{rollover time
- default is 1 day\} ==> this provides time to send the audit records from
local to destination and flush the pipe.
xasecure.audit.provider.filecache.filespool.dir=/var/log/hadoop/hdfs/audit/spool
==> provides the directory where the Audit FileSpool cache is present.
This helps in avoiding missing / partial audit records in the hdfs destination
which may happen randomly due to restart of respective plugin components.
was:
Ranger Audit framework enhancement to provide an option to allow audit records
to be spooled to local disk first before sending it to destinations.
xasecure.audit.provider.filecache.is.enabled = true ==> This will enable this
functionality of AuditFileCacheProivder to log the audits locally in a file.
xasecure.audit.provider.filecache.filespool.file.rollover.sec = \{rollover time
- default is 1 day\} ==> this provides time to send the audit records from
local to destination and flush the pipe.
xasecure.audit.provider.filecache.filespool.dir=/var/log/hadoop/hdfs/audit/spool
==> provides the directory where the Audit FileSpool cache is present.
This helps in avoiding missing / partial audit records in the hdfs destination
which may happen due to restart of respective plugin components.
> Ranger Audit framework enhancement to provide an option to allow audit
> records to be spooled to local disk first before sending it to destinations
> ---------------------------------------------------------------------------------------------------------------------------------------------------
>
> Key: RANGER-1310
> URL: https://issues.apache.org/jira/browse/RANGER-1310
> Project: Ranger
> Issue Type: Bug
> Reporter: Ramesh Mani
>
> Ranger Audit framework enhancement to provide an option to allow audit
> records to be spooled to local disk first before sending it to destinations.
> xasecure.audit.provider.filecache.is.enabled = true ==> This will enable
> this functionality of AuditFileCacheProivder to log the audits locally in a
> file.
> xasecure.audit.provider.filecache.filespool.file.rollover.sec = \{rollover
> time - default is 1 day\} ==> this provides time to send the audit records
> from local to destination and flush the pipe.
> xasecure.audit.provider.filecache.filespool.dir=/var/log/hadoop/hdfs/audit/spool
> ==> provides the directory where the Audit FileSpool cache is present.
> This helps in avoiding missing / partial audit records in the hdfs
> destination which may happen randomly due to restart of respective plugin
> components.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
