Erik Krogen created HDFS-12342:
----------------------------------
Summary: Differentiate webhdfs vs. swebhdfs calls in audit log
Key: HDFS-12342
URL: https://issues.apache.org/jira/browse/HDFS-12342
Project: Hadoop HDFS
Issue Type: Improvement
Components: logging
Reporter: Erik Krogen
Assignee: Erik Krogen
Currently the audit log only logs {{webhdfs}} vs {{rpc}} as the {{proto}}. It
is useful to be able to audit whether certain commands were carried out via
webhdfs or swebhdfs as this has different security and potentially performance
implications. We have been running this internally for a while and have found
it useful for looking at usage patterns.
Proposal is just to continue logging {{webhdfs}} as the proto for {{http}}
WebHDFS commands, but log {{swebhdfs}} for SWebHDFS (over {{https}}). This will
be incompatible.
--
This message was sent by Atlassian JIRA
(v6.4.14#64029)
---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-dev-unsubscr...@hadoop.apache.org
For additional commands, e-mail: hdfs-dev-h...@hadoop.apache.org
