[
https://issues.apache.org/jira/browse/HIVE-21943?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Hui An updated HIVE-21943:
--------------------------
Description:
Currently, we have audit log in the metastore( see
[HIVE-1948|https://issues.apache.org/jira/browse/HIVE-1948]), which provides us
useful info, like metadata operations, ip address, etc. But when we use HS2 to
connect HMS, all operations would assoicate with HS2 ip address, not actual
user's ip address. This could cause difficult problems when we want to locate
user's ip address. So I am thinking if we could add audit log in the HS2 too?
We could add much infomation in the audit log of HS2, like username, ipAddress,
queryId, queryStr, etc.
was:
Currently, we have audit log in the metastore( see
[HIVE-1948|https://issues.apache.org/jira/browse/HIVE-1948]), which provides us
useful info, like metadata operations, ip address, etc. But when we use HS2 to
connect HMS, all operations would assoicate with HS2 ip address, not actual
user's ip address. This could cause difficult problems when we want to locate
user's ip address. So I am thinking if we could add audit log in the HS2 too?
We could add much infomations in the audit log of HS2, like username,
ipAddress, queryId, queryStr, etc.
> Why do we not have audit log in HiveServer2?
> --------------------------------------------
>
> Key: HIVE-21943
> URL: https://issues.apache.org/jira/browse/HIVE-21943
> Project: Hive
> Issue Type: Improvement
> Reporter: Hui An
> Priority: Major
>
> Currently, we have audit log in the metastore( see
> [HIVE-1948|https://issues.apache.org/jira/browse/HIVE-1948]), which provides
> us useful info, like metadata operations, ip address, etc. But when we use
> HS2 to connect HMS, all operations would assoicate with HS2 ip address, not
> actual user's ip address. This could cause difficult problems when we want to
> locate user's ip address. So I am thinking if we could add audit log in the
> HS2 too?
> We could add much infomation in the audit log of HS2, like username,
> ipAddress, queryId, queryStr, etc.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
