[ https://issues.apache.org/jira/browse/RANGER-1780?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16179963#comment-16179963 ]
Alejandro Fernandez commented on RANGER-1780: --------------------------------------------- That's a very good point [~bosco]. One suggestion can be to have another config with a csv of any paths (potentially using regex) that should fall within this aggregation. By default it can be * if this feature is enabled. What does a Kafka resource look like? > Allow AuditSummaryQueue to aggregate events in the same directory > ----------------------------------------------------------------- > > Key: RANGER-1780 > URL: https://issues.apache.org/jira/browse/RANGER-1780 > Project: Ranger > Issue Type: Improvement > Components: audit > Affects Versions: 0.7.1 > Reporter: Alejandro Fernandez > Assignee: Alejandro Fernandez > Fix For: 1.0.0 > > Attachments: RANGER-1780.patch, ranger_summary.png > > > AuditSummaryQueue already has logic to enable the summarization, but it > requires 2 events to have the exact same resource path (plus a couple of > other fields such as user, access type, access result, action, client ip, > session). > This Jira is to add a config called > xasecure.audit.provider.summary.aggregate.level so that if it is set to > "directory" then 2 events can still be aggregated if they are files in the > same directory. > If the config is not specified its default value will be "file" which > preserves the existing behavior. > See [^ranger_summary.png] for screenshot on desired behavior. -- This message was sent by Atlassian JIRA (v6.4.14#64029)