-----------------------------------------------------------
This is an automatically generated e-mail. To reply, visit:
https://reviews.apache.org/r/73860/
-----------------------------------------------------------
Review request for ranger, Dineshkumar Yadav, Kishore Gopalakrishna, Abhay
Kulkarni, Mehul Parikh, Pradeep Agrawal, Ramesh Mani, Sailaja Polavarapu, and
Velmurugan Periasamy.
Bugs: RANGER-3615
https://issues.apache.org/jira/browse/RANGER-3615
Repository: ranger
Description
-------
Ref Doc:
https://blog.cloudera.com/auditing-to-external-systems-in-cdp-private-cloud-base/
Here's the example:
{"repoType":3,"repo":"hive","reqUser":"systest","evtTime":"2022-01-20
12:56:31.909","access":"USE","resource":"default","resType":"@database","action":"_any","result":1,"agent":"hiveServer2","policy":14,"enforcer":"ranger-acl","sess":"e162e0ad-717b-4934-9a50-6915de2268c3","cliType":"HIVESERVER2","cliIP":"172.27.27.131","reqData":"show
tables","agentHost":"pravinknox-2.pravinknox.root.site","logType":"RangerAudit","id":"d8c7d941-26b7-4390-85dd-4a51e716ae40-0","seq_num":1,"event_count":1,"event_dur_ms":1,"additional_info":"{\"remote-ip-address\":172.27.27.131,
\"forwarded-ip-addresses\":[]","cluster_name":"Cluster 1","policy_version":1}
Found some issue parsing the log due to a json format error there are basically
missing a '}' at the end of addition_info.
Code Ref:
https://github.com/apache/ranger/blob/master/agents-common/src/main/java/org/apache/ranger/plugin/audit/RangerDefaultAuditHandler.java#L270
Diffs
-----
agents-common/src/main/java/org/apache/ranger/plugin/audit/RangerDefaultAuditHandler.java
838cfada3
hdfs-agent/src/main/java/org/apache/ranger/authorization/hadoop/RangerHdfsAuthorizer.java
8940f36c0
Diff: https://reviews.apache.org/r/73860/diff/1/
Testing
-------
1.) Build Succeeded with test cases.
2.) Validataed audit JSON for hdfs , hive services.
Thanks,
Dhaval Shah
