[jira] [Updated] (RANGER-1310) Ranger Audit framework enhancement to provide an option to allow audit records to be spooled to local disk first before sending it to destinations

["Velmurugan Periasamy (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/RANGER-1310?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Velmurugan Periasamy updated RANGER-1310:
-----------------------------------------
    Fix Version/s: 0.7.0

> Ranger Audit framework enhancement to provide an option to  allow audit records to be spooled to local disk first before sending it to destinations
> ---------------------------------------------------------------------------------------------------------------------------------------------------
>
>                 Key: RANGER-1310
>                 URL: https://issues.apache.org/jira/browse/RANGER-1310
>             Project: Ranger
>          Issue Type: Bug
>            Reporter: Ramesh Mani
>            Assignee: Ramesh Mani
>             Fix For: 0.7.0
>
>
> Ranger Audit framework enhancement to provide an option to allow audit records to be spooled to local disk first before sending it to destinations. 
> xasecure.audit.provider.filecache.is.enabled = true ==>  This will enable this functionality of AuditFileCacheProivder to log the audits locally in a file.
> xasecure.audit.provider.filecache.filespool.file.rollover.sec = \{rollover time - default is 1 day\} ==> this provides time to send the audit records from local to destination and flush the pipe. 
> xasecure.audit.provider.filecache.filespool.dir=/var/log/hadoop/hdfs/audit/spool ==> provides the directory where the Audit FileSpool cache is present.
> This helps in avoiding missing / partial audit records in the hdfs destination which may happen randomly due to restart of respective plugin components. 



--
This message was sent by Atlassian JIRA
(v6.3.15#6346)