[jira] [Created] (RANGER-1310) Ranger Audit framework enhancement to provide an option to allow audit records to be spooled to local disk first before sending it to destinations

["Ramesh Mani (JIRA)" <ji...@apache.org>]

Ramesh Mani created RANGER-1310:
-----------------------------------

             Summary: Ranger Audit framework enhancement to provide an option to  allow audit records to be spooled to local disk first before sending it to destinations
                 Key: RANGER-1310
                 URL: https://issues.apache.org/jira/browse/RANGER-1310
             Project: Ranger
          Issue Type: Bug
            Reporter: Ramesh Mani


Ranger Audit framework enhancement to provide an option to allow audit records to be spooled to local disk first before sending it to destinations. 
xasecure.audit.provider.filecache.is.enabled = true 
==>  This will enable this functionality of AuditFileCacheProivder to log the audits locally in a file.
xasecure.audit.provider.filecache.filespool.file.rollover.sec = {rollover time - default is 1 day}
==> this provides time to send the audit records from local to destination and flush the pipe. 
xasecure.audit.provider.filecache.filespool.dir=/var/log/hadoop/hdfs/audit/spool ==> provides the directory where the Audit FileSpool cache is present.
This helps in avoiding missing / partial audit records in the hdfs destination which may happen  due to restart of respective plugin components. 



--
This message was sent by Atlassian JIRA
(v6.3.4#6332)