Ranger plugin / service access report - CDP 7.1.9 PB

[#1]

Hi,

I am trying to prepare a report listing Client IP addresses connecting to various Cloudera services. I know in Ranger Admin UI -> Audits -> Access, I can see this information. However, because of the huge list of records, it is not practical to copy each page from here. Hence, below are options i can think of to fetch the data:

1. Ranger database: I am unsure which table in ranger DB stores this information from where Ranger Admin UI gets the data. 

2. Solr: For our Ranger instance, source is configured as Solr. However, for some reason I am unable to query Solr via Solr UI. Possibly it could be coz of some permissions issues, as when attempted to get this data using Solr API, i get authentication error. Unsure where should I check for the permissions as in Solr Policy in Ranger, I have given all the reasonable permissions that I could think of to myself. Still no luck.

Please suggest

Thanks
snm1523

[#2 · Accepted solution]

Hello @snm1523 

Thank you for reaching out to the community

You can take a look at Ranger API as well to achieve the same

Go to Ranger UI >> Profile >> API documentation >> Expand XAuditREST >> Click on GET/xaudit/access_audit >> Click on Try it out and Execute. You can get this data in CSV and perform the operations

For eg.

curl -X 'GET' \
  'https://ccycloud-1.nightly-cm-qn.root.comops.site:6182/service/xaudit/access_audit' \
  -H 'accept: application/json'

[#3]

Thank you @upadhyayk04. This helped.