Support Questions

Find answers, ask questions, and share your expertise

ranger logfile getting filled

avatar
Super Collaborator

the xa_portal.log file is getting filled with these records , even though the system is not being used ., I using HDP2.5

2016-12-06 16:24:30,044 [http-bio-6080-exec-1] INFO  apache.ranger.security.web.filter.RangerKRBAuthenticationFilter (RangerKRBAuthenticationFilter.java:220) - Logged into Ranger as = hdfs
2016-12-06 16:24:30,045 [http-bio-6080-exec-1] INFO  org.apache.ranger.biz.SessionMgr (SessionMgr.java:232) - UserSession Updated to set new Permissions to User: hdfs
2016-12-06 16:24:30,046 [http-bio-6080-exec-1] INFO  org.apache.ranger.biz.SessionMgr (SessionMgr.java:184) - Login Success: loginId=hdfs, sessionId=null, sessionId=1EC316895EBF3A497B9227FED1143A70, requestId=10.100.44.17, epoch=1481059470046
2016-12-06 16:24:44,133 [http-bio-6080-exec-5] INFO  apache.ranger.security.web.filter.RangerKRBAuthenticationFilter (RangerKRBAuthenticationFilter.java:220) - Logged into Ranger as = hive
2016-12-06 16:24:44,135 [http-bio-6080-exec-5] INFO  org.apache.ranger.biz.SessionMgr (SessionMgr.java:232) - UserSession Updated to set new Permissions to User: hive
2016-12-06 16:24:44,135 [http-bio-6080-exec-5] INFO  org.apache.ranger.biz.SessionMgr (SessionMgr.java:184) - Login Success: loginId=hive, sessionId=null, sessionId=FFB6C01FD48142647893352C6AFF3CDB, requestId=10.100.44.16, epoch=1481059484135
2016-12-06 16:25:00,055 [http-bio-6080-exec-3] INFO  apache.ranger.security.web.filter.RangerKRBAuthenticationFilter (RangerKRBAuthenticationFilter.java:220) - Logged into Ranger as = hdfs
2016-12-06 16:25:00,056 [http-bio-6080-exec-3] INFO  org.apache.ranger.biz.SessionMgr (SessionMgr.java:232) - UserSession Updated to set new Permissions to User: hdfs
2016-12-06 16:25:00,057 [http-bio-6080-exec-3] INFO  org.apache.ranger.biz.SessionMgr (SessionMgr.java:184) - Login Success: loginId=hdfs, sessionId=null, sessionId=C6017523D930A116A3735C92F5397A49, requestId=10.100.44.17, epoch=1481059500057


1 ACCEPTED SOLUTION

avatar
Expert Contributor

@Sami Ahmad These messages are the Ranger plugins for HDFS and Hive connecting to Ranger Admin to check that they have the latest policies. If you want to stop these messages then you'll need to turn the Ranger Admin logging down to WARN, but these messages are normal. If you look at the frequency they'll occur every 30 seconds which is the default polling period for the plugins.

View solution in original post

2 REPLIES 2

avatar
Contributor

These ranger-admin sessions are created by "download policy actions" performed by RangerPlugins in NameNode, HiveServer process. They are authenticating to ranger-admin process using their service kerberos credentials (hdfs, hive).

avatar
Expert Contributor

@Sami Ahmad These messages are the Ranger plugins for HDFS and Hive connecting to Ranger Admin to check that they have the latest policies. If you want to stop these messages then you'll need to turn the Ranger Admin logging down to WARN, but these messages are normal. If you look at the frequency they'll occur every 30 seconds which is the default polling period for the plugins.