Created 11-07-2017 08:50 PM
Why there are too many audits for HTTP user for Access Type: ADMINISTER_QUEUE ?
Created 11-08-2017 10:02 AM
It seem HTTP user will be using capcity queue called ADMINISTER_QUEUE and being allowed through Ranger so there will be many audits for it
Created 11-08-2017 01:46 PM
Is it default user ? We have 1.3Million audits for that user per day
Created 11-08-2017 02:09 PM
audit events are caused due to ambari alert for checking Resource Manager UI status. So, disabling Ambari Alert for Resource Manger UI will resolve the issue.
or reduce the frequency of these audit events, increase the "Resource Manager web UI" alert to a higher value