[jira] [Comment Edited] (HIVE-21943) Add audit log in HiveServer2

["Hui An (JIRA)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/HIVE-21943?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16895232#comment-16895232 ] 

Hui An edited comment on HIVE-21943 at 7/29/19 1:14 PM:
--------------------------------------------------------

[~aihuaxu] Thanks for your reply. Yes, combining necessary infomation together, we could not only have a clear trace of every query, but also let us do some audit level jobs on HS2 easily, like redirecting audit log to some other audit systems.
Review posted to RB at [Code Review|https://reviews.apache.org/r/71173/]



was (Author: bone an):
[~aihuaxu] Thanks for your reply. Yes, Combining necessary infomation together, we could not only have a clear trace of every query, but also let us do some audit level jobs on HS2 easily, like redirecting audit log to some other audit systems.
Review posted to RB at [Code Review|https://reviews.apache.org/r/71173/]


> Add audit log in HiveServer2
> ----------------------------
>
>                 Key: HIVE-21943
>                 URL: https://issues.apache.org/jira/browse/HIVE-21943
>             Project: Hive
>          Issue Type: Improvement
>          Components: HiveServer2, Logging
>    Affects Versions: 1.2.2, 2.2.0, 3.1.0
>            Reporter: Hui An
>            Assignee: Hui An
>            Priority: Major
>         Attachments: HIVE-21943.patch.1, HIVE-21943.patch.2, HIVE-21943.patch.3
>
>
> Currently, we have audit log in the metastore( see HIVE-1948), which provides us useful info, like metadata operations, ip address, etc. But when we use HS2 to connect HMS, all operations would assoicate with HS2's ip address, not actual user's ip address. This could cause difficult problems when we want to locate the actual user. So I am wondering if we could add audit log in the HS2 too?
> We could add much infomation in the audit log of HS2, like username, ipAddress, queryId, queryStr, etc.



--
This message was sent by Atlassian JIRA
(v7.6.14#76016)