Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Find the user who restarted any services

Solved Go to solution

Find the user who restarted any services

Explorer

Hi All,

Is there any way to find who has restarted the services through Ambari .In our team six people working on different shifts and teams . It is very difficult to track who has initiated the service restart . For example . Some one restarted Namenode and we were unable to find who has initiated the restart via ambari .

Attached the ideal image of Ambari services restart . 10377-timedout.png

We have searched the logs with all 6 userid . The log returned nothing with the userids . Is there any alternative ways or how we can easily identify who has done the restart from Ambari .

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

Re: Find the user who restarted any services

Super Mentor

@Lenu K

Unfortunately Prior to Ambari 2.7 in Ambari Ui there is no option to see which user has performed the operations.

Ambari 2.7 screenshot:

92690-ambari-27-restart.png

However in previous version of ambari like Ambari 2.6 you can check the "ambari-audit.log" to see the activities performed by the user.

Example:

# tail -f /var/log/ambari-server/ambari-audit.log

2018-10-04T23:44:21.489Z, User(admin), RemoteIp(101.142.180.147), Operation(Request from server), RequestType(POST), url(http://hd1.example.com:8080/api/v1/clusters/TestCluster/requests), ResultStatus(202 Accepted), Command(RESTART), Cluster name(TestCluster)

2018-10-04T23:44:21.535Z, User(admin), Operation(Restart all components for SmartSense), Status(IN_PROGRESS), RequestId(852)

.

View solution in original post

1 REPLY 1
Highlighted

Re: Find the user who restarted any services

Super Mentor

@Lenu K

Unfortunately Prior to Ambari 2.7 in Ambari Ui there is no option to see which user has performed the operations.

Ambari 2.7 screenshot:

92690-ambari-27-restart.png

However in previous version of ambari like Ambari 2.6 you can check the "ambari-audit.log" to see the activities performed by the user.

Example:

# tail -f /var/log/ambari-server/ambari-audit.log

2018-10-04T23:44:21.489Z, User(admin), RemoteIp(101.142.180.147), Operation(Request from server), RequestType(POST), url(http://hd1.example.com:8080/api/v1/clusters/TestCluster/requests), ResultStatus(202 Accepted), Command(RESTART), Cluster name(TestCluster)

2018-10-04T23:44:21.535Z, User(admin), Operation(Restart all components for SmartSense), Status(IN_PROGRESS), RequestId(852)

.

View solution in original post

Don't have an account?
Coming from Hortonworks? Activate your account here