You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@ranger.apache.org by Alejandro Fernandez <af...@hortonworks.com> on 2017/09/25 23:11:21 UTC
Review Request 62552: RANGER-1780. Allow AuditSummaryQueue to
aggregate events in the same directory
-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/62552/
-----------------------------------------------------------
Review request for ranger, Abhay Kulkarni, Madhan Neethiraj, and Ramesh Mani.
Bugs: RANGER-1780
https://issues.apache.org/jira/browse/RANGER-1780
Repository: ranger
Description
-------
AuditSummaryQueue already has logic to enable the summarization, but it requires 2 events to have the exact same resource path (plus a couple of other fields such as user, access type, access result, action, client ip, session).
This Jira is to add a config called xasecure.audit.provider.summary.aggregate.level so that if it is set to "directory" then 2 events can still be aggregated if they are files in the same directory.
If the config is not specified its default value will be "file" which preserves the existing behavior.
Diffs
-----
agents-audit/src/main/java/org/apache/ranger/audit/model/AuditEventBase.java b5791467
agents-audit/src/main/java/org/apache/ranger/audit/model/AuthzAuditEvent.java 8d71851e
agents-audit/src/main/java/org/apache/ranger/audit/provider/MiscUtil.java eff38249
agents-audit/src/main/java/org/apache/ranger/audit/queue/AuditSummaryQueue.java 4c250336
agents-common/src/main/java/org/apache/ranger/plugin/audit/RangerDefaultAuditHandler.java 0e124f1a
hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java af4d9b5c
Diff: https://reviews.apache.org/r/62552/diff/1/
Testing
-------
Verified on live cluster.
Unit Tests passed
Once merged, will update the wiki https://cwiki.apache.org/confluence/display/RANGER/Ranger+0.5+Audit+Configuration#Ranger0.5AuditConfiguration-Summarization
Thanks,
Alejandro Fernandez