ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Don Bosco Durai (JIRA)" <j...@apache.org>
Subject [jira] [Commented] (RANGER-1310) Ranger Audit framework enhancement to provide an option to allow audit records to be spooled to local disk first before sending it to destinations
Date Tue, 17 Jan 2017 02:52:26 GMT

    [ https://issues.apache.org/jira/browse/RANGER-1310?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15824870#comment-15824870
] 

Don Bosco Durai commented on RANGER-1310:
-----------------------------------------

[~rmani], this seems to be a good option. How are you planning to implement this? Are you
planning to use another instance of AuditQueue which will be synchronous, i.e. write to file
and put the audit record to the AuditAsyncQueue for further processing?

Thanks

> Ranger Audit framework enhancement to provide an option to  allow audit records to be
spooled to local disk first before sending it to destinations
> ---------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: RANGER-1310
>                 URL: https://issues.apache.org/jira/browse/RANGER-1310
>             Project: Ranger
>          Issue Type: Bug
>            Reporter: Ramesh Mani
>
> Ranger Audit framework enhancement to provide an option to allow audit records to be
spooled to local disk first before sending it to destinations. 
> xasecure.audit.provider.filecache.is.enabled = true ==>  This will enable this functionality
of AuditFileCacheProivder to log the audits locally in a file.
> xasecure.audit.provider.filecache.filespool.file.rollover.sec = \{rollover time - default
is 1 day\} ==> this provides time to send the audit records from local to destination and
flush the pipe. 
> xasecure.audit.provider.filecache.filespool.dir=/var/log/hadoop/hdfs/audit/spool ==>
provides the directory where the Audit FileSpool cache is present.
> This helps in avoiding missing / partial audit records in the hdfs destination which
may happen randomly due to restart of respective plugin components. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)

Mime
View raw message