Support Questions
Find answers, ask questions, and share your expertise
Announcements
Alert: Welcome to the Unified Cloudera Community. Former HCC members be sure to read and learn how to activate your account here.

solr for ranger

Highlighted

solr for ranger

we are usign solr to store audit information for ranger. It seems the audit information is piling on solr. Is there a way to purge audit information after a particular period of time. we dont want to store the audit information forever.

2 REPLIES 2
Highlighted

Re: solr for ranger

@ARUN

There is not setting in Ranger that specifies how long to keep Audits. However, you can purge the audits from Solr using the Document Expiration functionality.

Having said that, the best practice is to store Ranger audit logs in both, Solr and HDFS. This way you can use the logs in Solr for your short-term indexed queries and the logs in HDFS for your long-term archived/queryable logs.

Highlighted

Re: solr for ranger

See this link for modifying solr config for ranger audit.

Don't have an account?
Coming from Hortonworks? Activate your account here