Support Questions

Find answers, ask questions, and share your expertise

Ranger audit log to hdfs

avatar
Contributor

Is it safe to delete older ranger audit logs?

/ranger/audit/hdfs/20200901/hdfs_ranger_audit_xyz.log

as my nodes running out of space.

 

1 ACCEPTED SOLUTION

avatar
Master Collaborator

@KPG1  Ranger audits store in both HDFS and Solr. HDFS is used for long term , Solr will be used for short term storage. By using Solr you have data indexed and you can view it quickly from Ranger UI. Deleting older ranger audit from hdfs will not cause any issues to the service

View solution in original post

1 REPLY 1

avatar
Master Collaborator

@KPG1  Ranger audits store in both HDFS and Solr. HDFS is used for long term , Solr will be used for short term storage. By using Solr you have data indexed and you can view it quickly from Ranger UI. Deleting older ranger audit from hdfs will not cause any issues to the service