Support Questions

Find answers, ask questions, and share your expertise

HTTP user audits in ranger

Contributor

Why there are too many audits for HTTP user for Access Type: ADMINISTER_QUEUE ?

3 REPLIES 3

It seem HTTP user will be using capcity queue called ADMINISTER_QUEUE and being allowed through Ranger so there will be many audits for it

Contributor

Is it default user ? We have 1.3Million audits for that user per day

Rising Star

audit events are caused due to ambari alert for checking Resource Manager UI status. So, disabling Ambari Alert for Resource Manger UI will resolve the issue.
or reduce the frequency of these audit events, increase the "Resource Manager web UI" alert to a higher value