Hi, all:
I want to config audit log for hive 1.2.1.
I use kerberos for hive authentication, and did not start up the hive
metastore service.
Just under such a background，I opened hive autid-log function. But the log
contents like this:
"HiveMetaStore.java:logAuditEvent(371) - ugi=ocp ip=unknown-ip-addr
cmd=get_table : db=default pat=*"
My $HIVE_HOME is on the same machine with hive metastore（MySQL）。I don't know
why the IP addr is "unknown-ip-addr". I looked into hive source code,and found
some useful info:
"
// This will return null if the metastore is not being accessed from a
metastore Thrift server,
// or if the TTransport being used to connect is not an instance of
TSocket, or if kereberos
// is used
public static String getThreadLocalIpAddress() {
return threadLocalIpAddress.get();
}"
Does this means if I used kerberos and didn't startup metastore service by
"hive --service metastore", the ip-addr will always be "unknown-ip-addr"?
and by the way, the cmd is just like this "cmd=get_table:db=default pat=*" or
"cmd=get_functions:db=default pat=*"，etc? the audit log cannot record full
specific sql？
Thanks in advance for any reply.
Maria.
