Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

ranger audit logs for HDFS

ranger audit logs for HDFS

ranger audits hdfs operations in log file . I have gone through the schema of ranger audit for hdfs but I do not understand some of the field . If there is security breach which column does show about security breach

for e.g

access resource agentHost event_dur_ms repo policy reason evtTime repoType result action enforcer cliIP cluster_name reqUser

Above is audit schema for hdfs, value for policy is either -1 or 1 in my case , does it relate something to security breach ?

please refer below link to go through the Schema of audit hdfs.

https://cwiki.apache.org/confluence/display/RANGER/Ranger+Audit+Schema#RangerAuditSchema-AudittoHDFS
Don't have an account?
Coming from Hortonworks? Activate your account here