Our Community is getting an upgrade! To get everything ready for the relaunch, we’ll be placing the site in read-only mode starting September 21st.
We really appreciate your understanding while we get things set up behind the scenes. Catch up on all the exciting details about the move here.
Need help or have questions? Drop us a line at [email protected]

Support Questions

Find answers, ask questions, and share your expertise
Announcements
Share your experience with Cloudera on G2 and get a $25 Amazon Gift card.
Hi, I'm CLEO! Something exciting is coming to the Community. Stay Tuned!

Audit HDFS solr spool log is not enabled in Cloudera Manager

avatar
New Contributor

Hello, 

I would like to write a log file to /var/log/cdp/hdfs/audit/solr/spool directory.
I added the following settings to Cloudera Manger's HDFS Advanced ranger-solr-audit.xml.

xasecure.audit.destination.solr.batch.filespool.enabled=true
xasecure.audit.destination.solr.batch.filespool.dir=/var/log/cdp/hdfs/audit/solr/spool
xasecure.audit.destination.solr.batch.filespool.archive.dir=/var/log/cdp/hdfs/audit/solr/spool/archive
xasecure.audit.destination.solr.batch.filespool.archive.max.files=50

/var/log/cdp/hdfs/audit/solr/spool directory was missing, creating spool and archive directories.

Should I modify install.properties or ranger-hdfs-plugin/install/conf.templates/enable/ranger-hdfs-audit.xml directly?
Or, I would like to know if there are any additional parts that need to be set up in Cloudera Manager.

 

Any help would be highly appreciated.

1 ACCEPTED SOLUTION

avatar
New Contributor

This issue has been resolved.
Solr's incorrect configuration was the cause, and as a result, a lot of logs were recorded in that folder.
After the solr environment was reconfigured, the log was no longer recorded.

View solution in original post

1 REPLY 1

avatar
New Contributor

This issue has been resolved.
Solr's incorrect configuration was the cause, and as a result, a lot of logs were recorded in that folder.
After the solr environment was reconfigured, the log was no longer recorded.