[ https://issues.apache.org/jira/browse/RANGER-3258?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17342425#comment-17342425 ]
Nitin Galave commented on RANGER-3258: -------------------------------------- Committed to [apache-master|https://github.com/apache/ranger/commit/fb00ef4a2d794c0d837702a3817cc14aa69b1920] branch. Committed to [ranger-2.2|https://github.com/apache/ranger/commit/62c9aeca807bd056c69a4b902db32a962c13590a] branch. > Update default hbase audit filters to filter out unwanted audits > ---------------------------------------------------------------- > > Key: RANGER-3258 > URL: https://issues.apache.org/jira/browse/RANGER-3258 > Project: Ranger > Issue Type: Improvement > Components: audit > Affects Versions: 2.2.0 > Reporter: Abhishek Shukla > Assignee: Mateen Mansoori > Priority: Major > > Can we update the default HBase audit filters as follows: > This will filter out HBase audits related to default, hbase, atlas_janus, > ATLAS_ENTITY_AUDIT_EVENTS table access by hbase service user. > {code:java} > [ > { > "accessResult":"DENIED", > "isAudited":true > }, > { > "resources":{ > "table":{ > "values":[ > "*-ROOT-*", > "*.META.*", > "*_acl_*", > "hbase:meta", > "hbase:acl", > "default", > "hbase" > ] > } > }, > "users":[ > "hbase" > ], > "isAudited":false > }, > { > "resources":{ > "table":{ > "values":[ > "atlas_janus", > "ATLAS_ENTITY_AUDIT_EVENTS" > ] > }, > "column-family":{ > "values":[ > "*" > ] > }, > "column":{ > "values":[ > "*" > ] > } > }, > "users":[ > "atlas", > "hbase" > ], > "isAudited":false > }, > { > "users":[ > "hbase" > ], > "actions":[ > "balance" > ], > "isAudited":false > } > ] > {code} > cc [~dineshkumar-yadav] -- This message was sent by Atlassian Jira (v8.3.4#803005)