tencent cloud

Feedback

Storing Ranger Audit Logs in Solr

Last updated: 2024-10-30 12:30:43
Ranger audit logs are disabled by default; you can enable the audit feature for the relevant components by modifying the configuration file as needed.
Note:
When you install Ranger in EMR-2.7.0 and later versions, a stand-alone Solr is installed by default on a single Master node to store Ranger’s audit logs, with a retention period of 7 days.
1. To enable the audit feature, taking HDFS as an example, go to the EMR Console> Cluster Services > HDFS > Configuration Management, and modify the ranger-hdfs-audit.xml file as follows:
xasecure.audit.is.enabled=true
xasecure.audit.solr.is.enabled=true
2. In Cluster Services > HDFS > Role Management, restart the NameNode role.
3. If the customer needs to retain Ranger audit logs for a long term, it is recommended to store Ranger audit logs in Tencent Cloud ElasticSearch.

Contact Us

Contact our sales team or business advisors to help your business.

Technical Support

Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

7x24 Phone Support