ranger-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Nitin Galave (Jira)" <j...@apache.org>
Subject [jira] [Commented] (RANGER-3257) Update default kafka audit filters to filter out unwanted audits
Date Tue, 11 May 2021 08:55:00 GMT

    [ https://issues.apache.org/jira/browse/RANGER-3257?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17342423#comment-17342423
] 

Nitin Galave commented on RANGER-3257:
--------------------------------------

Committed to [apache-master|https://github.com/apache/ranger/commit/fb00ef4a2d794c0d837702a3817cc14aa69b1920]
branch.
Committed to [ranger-2.2|https://github.com/apache/ranger/commit/62c9aeca807bd056c69a4b902db32a962c13590a]
branch.

> Update default kafka audit filters to filter out unwanted audits
> ----------------------------------------------------------------
>
>                 Key: RANGER-3257
>                 URL: https://issues.apache.org/jira/browse/RANGER-3257
>             Project: Ranger
>          Issue Type: Improvement
>          Components: audit
>    Affects Versions: 2.2.0
>            Reporter: Abhishek Shukla
>            Assignee: Mateen Mansoori
>            Priority: Major
>
> Can we update the default Kafka audit filters as follows: 
> This will filter out Kafka audits related to ATLAS_SPARK_HOOK, topic describe action,
etc
> {code:java}
> [
>   {
>     "accessResult":"DENIED",
>     "isAudited":true
>   },
>   {
>     "resources":{
>       "topic":{
>         "values":[
>           "ATLAS_ENTITIES",
>           "ATLAS_HOOK",
>           "ATLAS_SPARK_HOOK"
>         ]
>       }
>     },
>     "users":[
>       "atlas"
>     ],
>     "actions":[
>       "describe",
>       "publish",
>       "consume"
>     ],
>     "isAudited":false
>   },
>   {
>     "resources":{
>       "topic":{
>         "values":[
>           "ATLAS_HOOK"
>         ]
>       }
>     },
>     "users":[
>       "hive",
>       "hbase",
>       "impala",
>       "nifi"
>     ],
>     "actions":[
>       "publish",
>       "describe"
>     ],
>     "isAudited":false
>   },
>   {
>     "resources":{
>       "topic":{
>         "values":[
>           "ATLAS_ENTITIES"
>         ]
>       }
>     },
>     "users":[
>       "rangertagsync"
>     ],
>     "actions":[
>       "consume",
>       "describe"
>     ],
>     "isAudited":false
>   },
>   {
>     "resources":{
>       "consumergroup":{
>         "values":[
>           "*"
>         ]
>       }
>     },
>     "users":[
>       "atlas",
>       "rangertagsync"
>     ],
>     "actions":[
>       "consume"
>     ],
>     "isAudited":false
>   },
>   {
>     "users":[
>       "kafka"
>     ],
>     "isAudited":false
>   }
> ]
> {code}
> cc [~dineshkumar-yadav]



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Mime
View raw message