Audit logs for ambari-server sync-ldap ?

[#1]

We are trying to figure out why a few groups were added. I am having trouble finding these additions in logs. Where would this be saved?

ambari-server sync-ldap --users users.txt --groups groups.txt

[#2]

Hi @Michael DeGuzis

All events linked to Ambari LDAP sync are written to :

/var/log/ambari-server/ambari-server.log

cf : https://docs.hortonworks.com/HDPDocuments/Ambari-2.6.0.0/bk_ambari-security/content/synchronizing_ld...

Search the logs for events containing :

- FilterBasedLdapUserSearch => search filter criteria

or

- AmbariLdapAuthenticationProvider => ex : warnings for failed authentication