Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

RANGER-4355: fix the issue that elasticsearch plugin can't generate audit logs! #278

Open
wants to merge 3 commits into
base: master
Choose a base branch
from

Conversation

lchqlchq
Copy link

fix the issue that elasticsearch plugin can't generate audit logs!
JIRA:
https://issues.apache.org/jira/browse/RANGER-4355

elasticsearch audit logs issue, how to test:

  1. enable elasticsearch plugin
  2. enable audit:
    set ranger-elasticsearch-audit file
    xasecure.audit.is.enabled=true
    xasecure.audit.destination.solr=true
    3.operate elasticsearch
    curl esip:9200/_cat/indices
    and observe the audit log by ranger admin ui

@lchqlchq
Copy link
Author

lchqlchq commented Oct 8, 2023

@pradeepagrawal8184 @rameeshm, Can you please take a minute look at this ?

@BigDataDZ
Copy link

xasecure.audit.destination.elasticsearch true xasecure.audit.destination.elasticsearch.urls 1.1.1.x xasecure.audit.destination.elasticsearch.port 12345 xasecure.audit.destination.elasticsearch.protocol http xasecure.audit.destination.elasticsearch.user elastic xasecure.audit.destination.elasticsearch.password hhhdasd xasecure.audit.destination.elasticsearch.index ranger xasecure.audit.destination.elasticsearch.bootstrap.enabled true This is the configuration file ranger admin site. xml in my ranger. Why can ranger automatically create indexes for es, but when I create or delete users in ranger, the operation log data is not written to es? Do I need to configure anything else

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
2 participants