Thank you Bosco, your information is very helpful!
Regards,
Da
> On Oct 14, 2016, at 8:34 PM, Don Bosco Durai <bo...@apache.org> wrote:
>
> Da
>
> Madhan is the original author for the audit framework in Ranger 0.4 release.
> One quick feedback is, if you are using HDP, which in turn uses Ambari, then
> any manual configuration you might do will be overwritten.
>
> The best way to debug log4j related issues, is to create a file appender
> (instead of Kafka) and make sure your custom log4j appender is called.
>
> Question：
> 1. If there any place that I can find related logs to debug the log4j
> appender failure?
> All debug/error logs will go to native component log file. In this case it
> will be Hive log files.
>
> 2. Another question is that audit logs are only generated if i do the hive
> query through Hue. Seems Ranger's policies can not be applied to operation
> happened in hive terminal? Or there is something wrong with my configuration?
> Only request going to through HiveServer2 will be intercepted by the Hive
> plugin. So it needs to be either Beeline client or JDBC.
>
> Ranger used to support plugin on client side also. In the case of Hue,
> originally Hue used to load the client hive library and the policies used to
> be enforced at the Hue server. But later, they started supporting
> JDBC/Beeline, so we removed support for client side enforcement. I don’t
> remember from which version we removed the support for it.
>
> Thanks
>
> Bosco
>
>
> From: Da Zhou <daveloperz...@gmail.com>
> Reply-To: <user@ranger.incubator.apache.org>
> Date: Friday, October 14, 2016 at 3:44 PM
> To: <user@ranger.incubator.apache.org>
> Subject: Questions for Ranger's hive plugin
>
> Hi, Rangers ,
>
> I am trying to send hive audit logs to kafka by following this link:
> https://cwiki.apache.org/confluence/display/RANGER/Configuring+Kafka+log4j+appender+with+Apache+Ranger+Audits
>
> <https://cwiki.apache.org/confluence/display/RANGER/Configuring+Kafka+log4j+appender+with+Apache+Ranger+Audits>
>
> Unfortunately, I saw no messages were sent to kafka and there was no error
> messages.
>
> What I have now:
> 1. Ranger (0.4) installed on hortonworks (2.2)
> 2. Kafka (0.8.x)
> 3. Hive audit logs are generated both in local fs and the repo on ranger.
> 4. No errors observed in hive-server2 logs, nor kafka.out
> 5. Based on the tutorial listed above, I have modified
> "hive-log4j.properties" and also add the jars (same version) to hive lib.
>
> Question：
> 1. If there any place that I can find related logs to debug the log4j
> appender failure?
> 2. Another question is that audit logs are only generated if i do the hive
> query through Hue. Seems Ranger's policies can not be applied to operation
> happened in hive terminal? Or there is something wrong with my configuration?
>
> Really appreciate your help.
>
> Thanks and regards,
> Da
>
>
>
