@Ramesh Mani @bdurai There is something missing. I applied the indicated properties on HDP Sandbox via ambari and restarted the components and I immediately see the file created (zero length). Run some queries from Beeline, and the file is never appended !!! (and new ones created either). I changed the date pattern to do it every minute (fragment from "Advanced hive-log4j" in ambari): ranger.logger=INFO,console,RANGERAUDIT log4j.logger.xaaudit=${ranger.logger} log4j.appender.RANGERAUDIT=org.apache.log4j.DailyRollingFileAppender log4j.appender.RANGERAUDIT.File=/tmp/ranger_hdfs_audit.log log4j.appender.RANGERAUDIT.layout=org.apache.log4j.PatternLayout log4j.appender.RANGERAUDIT.layout.ConversionPattern=%d{ISO8601} %p %c{2}: %L %m%n log4j.appender.RANGERAUDIT.DatePattern='.'yyyy-MM-dd-HH-mm Has anybody tried this configuration ? ... View more

Has this property been deleted or renamed in HDP 2.3? There is the following props: xasecure.audit.destination.db.batch.filespool.dir xasecure.audit.destination.hdfs.batch.filespool.dir ... View more