question Re: Ranger audit with Solr doesn't work in Archives of Support Questions (Read Only)

Ranger audit with Solr doesn't work

erkansirin78 — Sun, 18 Aug 2019 08:39:21 GMT

I use HDP 2.6.3. I use Ranger. From Ranger UI once I click Audit I see the following ERROR.

Error running solr query, please check solr configs.Errorfrom server at http://hadooptest01.datalonga.com:8886/solr/ranger_audits: Expected mime type application/octet-stream but got text/html.

Re: Ranger audit with Solr doesn't work

JonathanSneep — Fri, 13 Jul 2018 22:04:39 GMT

It might just be that there is no data yet to display. During your setup, did you run

/opt/solr/ranger_audit_server/scripts/create_ranger_audits_collection.sh

[see also; https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.6.3/bk_security/content/solr_ranger_configure_solrcloud.html]

Re: Ranger audit with Solr doesn't work

rguruvannagari — Sun, 15 Jul 2018 15:13:34 GMT

@Erkan ŞİRİN

It looks that ranger_audits collection is not created. This is supposed to be created when Audit to solr is enabled in "Ranger Audit" Tab.

Ambari will create ranger_audits collection when ranger admin service is restarted with Audit to solr enabled.

Make sure that Infra-solr service is insatalled in cluster and "Audit to solr" and "Solr cloud" is enabled. Restart Ranger admin service, check the Ambari operation log for Ranger admin service start and see if ranger_audits collection is successfully created. You may need to troubleshoot solr if the create-collection fails with any error.

Re: Ranger audit with Solr doesn't work

Shelton — Sun, 18 Aug 2019 08:39:13 GMT

@Erkan ŞİRİN

Did you enable your plugin like below

I would advice you to restart the cluster it happened to me once that the audits ONLY popped up after the restart of cluster for reasons I don't know yet !

Make sure you see the entry in zookeeper too

Re: Ranger audit with Solr doesn't work

erkansirin78 — Mon, 16 Jul 2018 12:48:57 GMT

Hi @Jonathan Sneep I installed my cluster via Ambari so there is no such directory. I looked at ranger-admin directory all are .py script not .sh

Re: Ranger audit with Solr doesn't work

erkansirin78 — Mon, 16 Jul 2018 13:23:19 GMT

Thank you @rguruvannagari I just enabled SolrCloud and restarted. I don't see audit error anymore.