Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Please see the Cloudera blog for information on the Cloudera Response to CVE-2021-4428

Ranger audit log to hdfs

Explorer

Is it safe to delete older ranger audit logs?

/ranger/audit/hdfs/20200901/hdfs_ranger_audit_xyz.log

as my nodes running out of space.

 

1 ACCEPTED SOLUTION

Accepted Solutions

Super Collaborator

@KPG1  Ranger audits store in both HDFS and Solr. HDFS is used for long term , Solr will be used for short term storage. By using Solr you have data indexed and you can view it quickly from Ranger UI. Deleting older ranger audit from hdfs will not cause any issues to the service

View solution in original post

1 REPLY 1

Super Collaborator

@KPG1  Ranger audits store in both HDFS and Solr. HDFS is used for long term , Solr will be used for short term storage. By using Solr you have data indexed and you can view it quickly from Ranger UI. Deleting older ranger audit from hdfs will not cause any issues to the service

View solution in original post