Manually Update HDFS Audit Settings for Ambari installs
The following steps show how to save Ranger audits to HDFS for HBase. You can use the same procedure for other components.
- From the Ambari dashboard, select the HBase service. On the Configs tab, scroll down and select Advanced ranger-hbase-audit. Select the Audit to HDFS check box.
Set the HDFS path where you want to store audits in HDFS:
xasecure.audit.destination.hdfs.dir = hdfs://$NAMENODE_FQDN:8020/ranger/audit.
Refer to the
fs.defaultFSproperty in the Advanced core-site settings.Note
For NameNode HA,
NAMENODE_FQDNis the cluster name. In order for this to work,
/etc/hadoop/conf/hdfs-site.xmlneeds to be linked under
- Enable the Ranger plugin for HBase.
Make sure that the plugin sudo user has permission on the HDFS Path:
hdfs://NAMENODE_FQDN:8020/ranger/audit.For example, we need to create a Policy for Resource :
/ranger/audit, all permissions to user hbase.
- Save the configuration updates and restart HBase.
- Generate some audit logs for the HBase component.
Check the HFDS component logs on the NameNode: