Hello, Has anyone encountered an issue were Knox is not writing audit logs of specific topology. We have below topologies created including few of them migrated from HDP, however, necessary modifications were done and are listed in Knox UI. cdp-proxy cdp-proxy-api cdp-proxy-token health tokenexchange user1 - created for user group topo1 - created for user group and migrated from HDP topo2 - created for user group and migrated from HDP app - Used by app accounts Knox is successfully writing Ranger audit logs in HDFS for only cdp* topologies which were created by Cloudera during setup of Knox service and not for other. Written logs are visible in access tab of Audit section in Ranger Admin UI. We have total of 3 clusters and this is the case 2 clusters, for 1 cluster everything works fine. I have compared the configuration and also topology xmls and all seems correct (except for instance details which is obvious). Would it be anything related to Ranger or Solr configuration for Knox? However, if that is case it should be applicable to all topologies of Knox, why only non-default ones? Please help with suggestions / things to check / troubleshoot. Thanks snm1523 ... View more

Hello, Any clue on how we configure Streams Messaging Manager server to send audit logs to HDFS and / or Solr (just like other services) and then they would get archived to /archive directory from where we can manually delete them? I am referring to logs that get stored under below location locally (not HDFS) /var/log/streams-messaging-manager/audit/<hdfs or solr>/spool Thanks snm1523 ... View more