ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Alejandro Fernandez (JIRA)" <j...@apache.org>
Subject [jira] [Updated] (RANGER-1780) Allow AuditSummaryQueue to aggregate events in the same directory
Date Mon, 25 Sep 2017 22:45:00 GMT

     [ https://issues.apache.org/jira/browse/RANGER-1780?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Alejandro Fernandez updated RANGER-1780:
----------------------------------------
    Description: 
AuditSummaryQueue already has logic to enable the summarization, but it requires 2 events
to have the exact same resource path (plus a couple of other fields such as user, access type,
access result, action, client ip, session).
This Jira is to add a config called xasecure.audit.provider.summary.aggregate.level so that
if it is set to "directory" then 2 events can still be aggregated if they are files in the
same directory.
If the config is not specified its default value will be "file" which preserves the existing
behavior.

See [^ranger_summary.png] for screenshot on desired behavior.

  was:
AuditSummaryQueue already has logic to enable the summarization, but it requires 2 events
to have the exact same resource path (plus a couple of other fields such as user, access type,
access result, action, client ip, session).
This Jira is to add a config called xasecure.audit.provider.summary.aggregate.level so that
if it is set to "directory" then 2 events can still be aggregated if they are files in the
same directory.
If the config is not specified its default value will be "file" which preserves the existing
behavior.


> Allow AuditSummaryQueue to aggregate events in the same directory
> -----------------------------------------------------------------
>
>                 Key: RANGER-1780
>                 URL: https://issues.apache.org/jira/browse/RANGER-1780
>             Project: Ranger
>          Issue Type: Improvement
>          Components: audit
>    Affects Versions: 0.7.1
>            Reporter: Alejandro Fernandez
>             Fix For: 1.0.0
>
>         Attachments: RANGER-1780.patch, ranger_summary.png
>
>
> AuditSummaryQueue already has logic to enable the summarization, but it requires 2 events
to have the exact same resource path (plus a couple of other fields such as user, access type,
access result, action, client ip, session).
> This Jira is to add a config called xasecure.audit.provider.summary.aggregate.level so
that if it is set to "directory" then 2 events can still be aggregated if they are files in
the same directory.
> If the config is not specified its default value will be "file" which preserves the existing
behavior.
> See [^ranger_summary.png] for screenshot on desired behavior.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

Mime
View raw message