ranger icon indicating copy to clipboard operation
ranger copied to clipboard

RANGER-4355: fix the issue that elasticsearch plugin can't generate audit logs!

Open lchqlchq opened this issue 2 years ago • 2 comments

fix the issue that elasticsearch plugin can't generate audit logs! JIRA: https://issues.apache.org/jira/browse/RANGER-4355

elasticsearch audit logs issue, how to test:

  1. enable elasticsearch plugin
  2. enable audit: set ranger-elasticsearch-audit file xasecure.audit.is.enabled=true xasecure.audit.destination.solr=true 3.operate elasticsearch curl esip:9200/_cat/indices and observe the audit log by ranger admin ui

lchqlchq avatar Aug 17 '23 07:08 lchqlchq

@pradeepagrawal8184 @rameeshm, Can you please take a minute look at this ?

lchqlchq avatar Oct 08 '23 05:10 lchqlchq

xasecure.audit.destination.elasticsearch true xasecure.audit.destination.elasticsearch.urls 1.1.1.x xasecure.audit.destination.elasticsearch.port 12345 xasecure.audit.destination.elasticsearch.protocol http xasecure.audit.destination.elasticsearch.user elastic xasecure.audit.destination.elasticsearch.password hhhdasd xasecure.audit.destination.elasticsearch.index ranger xasecure.audit.destination.elasticsearch.bootstrap.enabled true This is the configuration file ranger admin site. xml in my ranger. Why can ranger automatically create indexes for es, but when I create or delete users in ranger, the operation log data is not written to es? Do I need to configure anything else

BigDataDZ avatar Oct 24 '23 08:10 BigDataDZ