Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

Range Audit Page - No Data for Report

Solved Go to solution
Highlighted

Range Audit Page - No Data for Report

Contributor

We have HDP 2.3 with Ranger. Audit data store is MySQL DB. The audit transactions are getting stored in ranger_audit db. But the Ranger Audit page on ranger admin portal did not showing any record. We are also trying to store log to HDFS/ranger/audit folder, but these also not getting recorded.

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted

Re: Range Audit Page - No Data for Report

In the Ranger audits page, try removing the default filter (for the current days audits). Sometimes if there is a time mismatch you won't see any audits in Ranger by default, but after clearing this filter they appear

View solution in original post

5 REPLIES 5
Highlighted

Re: Range Audit Page - No Data for Report

Expert Contributor

Which Ranger Plugin for which audit is getting logged? Please check if there is Ranger Policy for auditing the resource for the Hadoop component you are auditing. In Ambari for Ranger service check in Config check property Advanced-Ranger-admin-site> "ranger.audit.source.type" . This should be set to "db"

Please check this also for details

http://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.2/bk_Ranger_Install_Guide/content/ranger_datab...

Highlighted

Re: Range Audit Page - No Data for Report

Contributor

HDFS ranger plugin audit is getting logged in Ranger_Audit DB. Yes,HDFS resource access/denied audit is being audited and recorded in MySQL ranger_audit DB. We have verified from the xa_access.. table. Yes,the ranger.audit.source.type is set to db in advance-ranger-admin-site. Still the audit page is not displaying any transactions.

Highlighted

Re: Range Audit Page - No Data for Report

In the Ranger audits page, try removing the default filter (for the current days audits). Sometimes if there is a time mismatch you won't see any audits in Ranger by default, but after clearing this filter they appear

View solution in original post

Highlighted

Re: Range Audit Page - No Data for Report

Contributor

source type is setup by default to 'solr'. I changed it to 'db' and also, remove the filter. And it works!!!!.

The Solr os a preferabl and the recommended audit source type but unfortunately it is not included in the Ambari 2.1 stack.

Thanks for the support.

Highlighted

Re: Range Audit Page - No Data for Report

Thanks for letting us know. Solr is included with HDP Search with HDP 2.3. You install from repo using instructions here:

https://docs.hortonworks.com/HDPDocuments/HDP2/HDP-2.3.0/bk_search/index.html

The official Solr stack service for Ambari is on the roadmap. Until then, for test/dev envs you can use one of these (not for use in prod envs):

https://github.com/LucidWorks/solr-stack

https://github.com/abajwa-hw/solr-stack

Don't have an account?
Coming from Hortonworks? Activate your account here