[jira] [Commented] (HDFS-12342) Differentiate webhdfs vs. swebhdfs calls in audit log

["Erik Krogen (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HDFS-12342?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16138530#comment-16138530 ] 

Erik Krogen commented on HDFS-12342:
------------------------------------

Ping [~aw] (I feel you may have thoughts on this) and [~andrew.wang] for a Cloudera opinion.

> Differentiate webhdfs vs. swebhdfs calls in audit log
> -----------------------------------------------------
>
>                 Key: HDFS-12342
>                 URL: https://issues.apache.org/jira/browse/HDFS-12342
>             Project: Hadoop HDFS
>          Issue Type: Improvement
>          Components: logging
>            Reporter: Erik Krogen
>            Assignee: Erik Krogen
>              Labels: Incompatible
>
> Currently the audit log only logs {{webhdfs}} vs {{rpc}} as the {{proto}}. It is useful to be able to audit whether certain commands were carried out via webhdfs or swebhdfs as this has different security and potentially performance implications. We have been running this internally for a while and have found it useful for looking at usage patterns.
> Proposal is just to continue logging {{webhdfs}} as the proto for {{http}} WebHDFS commands, but log {{swebhdfs}} for SWebHDFS (over {{https}}). This will be incompatible.



--
This message was sent by Atlassian JIRA
(v6.4.14#64029)

---------------------------------------------------------------------
To unsubscribe, e-mail: hdfs-issues-unsubscribe@hadoop.apache.org
For additional commands, e-mail: hdfs-issues-help@hadoop.apache.org