You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues-all@impala.apache.org by "ASF subversion and git services (Jira)" <ji...@apache.org> on 2021/05/12 15:50:00 UTC
[jira] [Commented] (IMPALA-10401) Enable Ranger Audit logs in
minicluster
[ https://issues.apache.org/jira/browse/IMPALA-10401?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17343322#comment-17343322 ]
ASF subversion and git services commented on IMPALA-10401:
----------------------------------------------------------
Commit 986e236939256349474528d9ec48e5cb4ced34e6 in impala's branch refs/heads/master from stiga-huang
[ https://gitbox.apache.org/repos/asf?p=impala.git;h=986e236 ]
IMPALA-10401: Enable Ranger audit logs to log4j
This patch enables audit logging to log4j for Ranger plugins, which
provides us with more info in debugging flaky test failures. The audits
are logged by Log4JAuditDestination. Each line shows which policy takes
effect and whether the access is allowed.
For FE tests, the log file is in logs/fe_tests/FeSupport.INFO. For e2e
and custom cluster tests, the audits are logged in log files of
processes that have ranger plugins (e.g. catalogd, cooridnator).
Tests:
- Manually verify the audit logs exist.
Change-Id: I9e6850882594f31dc2250fe205fa6cad26a30571
Reviewed-on: http://gerrit.cloudera.org:8080/17416
Reviewed-by: Impala Public Jenkins <im...@cloudera.com>
Tested-by: Impala Public Jenkins <im...@cloudera.com>
> Enable Ranger Audit logs in minicluster
> ---------------------------------------
>
> Key: IMPALA-10401
> URL: https://issues.apache.org/jira/browse/IMPALA-10401
> Project: IMPALA
> Issue Type: New Feature
> Components: Infrastructure
> Reporter: Quanlong Huang
> Assignee: Quanlong Huang
> Priority: Major
> Attachments: Ranger Admin Access Audit.png
>
>
> It'd be helpful for debugging e2e ranger authz tests if we can get the audit logs. Ranger supports ingesting audit logs to Solr or HDFS files. We currently don't have Solr in our minicluster. We can try enabling ranger audit logs in HDFS and save the file for each job.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-all-unsubscribe@impala.apache.org
For additional commands, e-mail: issues-all-help@impala.apache.org