Manually Update Ambari Solr Audit Settings

You can save and store Ranger audits to Solr if you have installed and configured the Solr service in your cluster.

1. From the Ambari dashboard, select the Ranger service. Select Configs > Advanced, then scroll down and select Advanced ranger-admin-site.
2. Set the following property value: ranger.audit.source.type = solr.
3. On the Ranger Configs tab, select Ranger Audit. The SolrCloud button should be set to ON. The SolrCloud configuration settings are loaded automatically when the SolrCloud button is set from OFF to ON, but you can also manually update the settings.

   	Note
   	Audits to Solr requires that you have already “Configure Externally-Managed SolrCloud”.

4. Restart the Ranger service: service ranger-admin restart.
5. After the Ranger service has been restarted, you will then need to make specific configuration changes for each plugin to ensure that the plugin's data is captured in Solr.
6. For example, if you would like to configure HBase for audits to Solr, perform the following steps:
   1. Select the Audit to Solr checkbox in Advanced ranger-hbase-audit.
   2. Enable the Ranger plugin for HBase.
   3. Restart the HBase component.
7. Verify that the Ranger audit logs are being passed to Solr by opening one of the following URLs in a web browser:
   • http://{RANGER_HOST_NAME}:6080/index.html#!/reports/audit/bigData
   • For HDP Search's Solr Instance: http:{SOLR_HOST}:8983/solr/ranger_audits
   • For Ambari Infra's Solr Instance:http:{SOLR_HOST}:8886/solr/ranger_audits