Hadoop Security Guide
Also available as:
PDF
loading table of contents...

Save Audits to Solr

[Note]Note

Saving audits to Solr requires that you have already installed Solr and configured SolrCloud.

To save audits to Solr:

  1. From the Ambari dashboard, select the Ranger service. Select Configs > Advanced, then scroll down and select Advanced ranger-admin-site. Set the following property value:

    • ranger.audit.source.type = solr

  2. On the Ranger Configs tab, select Ranger Audit. The SolrCloud button should be set to ON. The SolrCloud configuration settings are loaded automatically when the SolrCloud button is set from OFF to ON, but you can also manually update the settings.

  3. Restart the Ranger service.

  4. Next, to enable Ranger KMS auditing to Solr, set the following properties in the Advanced ranger-kms-audit list:

    1. Check the box next to Enable audit to solr in the Ranger KMS component.

    2. Check the Audit provider summary enabled box, and make sure that xasecure.audit.is.enabled is set to true.

    3. Restart Ranger KMS.

[Note]Note

Check audit logs on Ranger UI, to make sure that they are getting through Solr: http://RANGER_HOST_NAME:6080/index.html#!/reports/audit/bigData or http://solr_host:6083/solr/ranger_audits.