Created 02-23-2018 09:53 AM
What is the difference between these Solr collections?
Created 02-24-2018 06:32 AM
ranger_audits:- This is by Ranger plugins (hive,kafka etc) to stored the authorization audits [user,ip, resource, access/deny etc, timestamp etc] specific to authorization
Logsearch: audit_logs :- This is the collection where the logs of the service where the log_search is integrated. This is later used by logsearch UI to do analysis.
Created 02-24-2018 11:04 AM
Logsearch stores logs in the collection "hadoop_logs". What does it store in "audit_logs" and is there an overlap with Ranger?
I don't see any documentation for logsearch explaining what is in each collection.
And what "solr_audit_logs_use_ranger" means in the logsearch config.