Differentiate Events from Multiple Clusters
To differentiate the audit events generated by multiple ephemeral clusters that are stored in the same shared service cluster, you can define a cluster name. The cluster name is visible in Ranger>Auditing>Access and Ranger>Auditing>Plugins.
From Ambari>
component
>Configs>Advanced>ranger-component
-audit, define a value forranger.plugin.
.component
.ambari.cluster.name=cluster_name
Restart Ranger and the component.
For example, in Ambari>HDFS>Configs>Advanced>ranger-hdfs-audit:
ranger.plugin.hdfs.ambari.cluster.name=cluster_c6700.