Set maximum retention days for Ranger audits

You can now update the solr document expiry ranger.audit.solr.config.ttl and ranger.audit.solr.config.delete.trigger parameters from Ranger configurations in Cloudera Manager and refresh the configurations to get the Solr collection for Ranger audits updated with ttl and delete trigger.

In HDP 2.6.5, the ranger_audit_max_retention_days attribute in Ranger Configurations is used to specify the maximum number of days to retain the Ranger Audit records in Ambari Infra solr. By default it is set to 90 days.

  1. Log in to Cloudera Manager
  2. Navigate to Clusters
  3. Select the Ranger service
  4. Go to Configurations
  5. Search for the ranger.audit.solr.config.ttl and ranger.audit.solr.config.delete.trigger parameters and update them.

    Cloudera Manager displays a refresh configuration notification for the Ranger service.

  6. You must refresh the Configurations action which updates the parameters in the Ranger audits collection in Solr. For more information, see the Manual process available.