Support Questions

Find answers, ask questions, and share your expertise

Apache Ranger does not show the access audit details for Knox

avatar
Expert Contributor

I installed apache knox on HDP 2.4.2. I have been able to successfully configure the gateway and can use curl commands to query HBase through the REST service. However, the inquiry details are not reflecting in the audit section of the apache ranger admin. Only the access audit tab is not showing anything but the other tabs (admin, login sessions and plugins) are fine. Any one come across this challenge?

1 ACCEPTED SOLUTION

avatar
Super Collaborator

For the Ranger Audit tab to work and display information, you need to first install Solr - HDP Search as per https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.4/bk_hdp_search/content/ch_hdp-search-install...

And then follow the steps from the link provided by Sunile:

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.4.2/bk_installing_manually_book/content/enabling...

View solution in original post

9 REPLIES 9

avatar
Master Guru

@Joshua Adeleke

Ranger supports audit logging hdfs and solr in 2.4.2. More info here. Please advise why you are using hbase for audit logs?

avatar
Expert Contributor
@Sunile Manjee

I am using Ranger for all the audits. I am currently testing knox and i can't see any log in ranger under the access tab.

6392-ranger-admin.png

avatar
Master Guru

And i assume you are looking for the audit logs? If so look under audit tab. If you did that and nothing shows up, you need to configure the audit db. Look at link i provided.

avatar
Expert Contributor

I have configured for all the components except Solr and Storm. However, i am more interested in the other services (Knox, HBase, HDFS...). Can not configuring storm stall things?

avatar
Master Guru

I am confused by your last comment. Have you configured ranger and audit?

avatar
Expert Contributor

Yes i have. and i see the logs in the Admin, Login session and Plugins but NOT in the Access tab.

6419-ranger-audit.png

avatar
Master Guru

Can you check the following setting:

XAAUDIT.HDFS.IS_ENABLED Flag to enable/disable hdfs audit logging. If the hdfs audit logging is turned off, it will not log any access control to hdfs

avatar
Expert Contributor

Thank you @Sunile Manjee. I had to install Solr to get the access audit tab working. Thanks to @Alexandru Anghel as well. God bless you all.

avatar
Super Collaborator

For the Ranger Audit tab to work and display information, you need to first install Solr - HDP Search as per https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.4/bk_hdp_search/content/ch_hdp-search-install...

And then follow the steps from the link provided by Sunile:

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.4.2/bk_installing_manually_book/content/enabling...