Uploaded image for project: 'Hadoop HDFS'
  1. Hadoop HDFS
  2. HDFS-12342

Differentiate webhdfs vs. swebhdfs calls in audit log

    XMLWordPrintableJSON

    Details

    • Type: Improvement
    • Status: Open
    • Priority: Major
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: logging
    • Labels:

      Description

      Currently the audit log only logs webhdfs vs rpc as the proto. It is useful to be able to audit whether certain commands were carried out via webhdfs or swebhdfs as this has different security and potentially performance implications. We have been running this internally for a while and have found it useful for looking at usage patterns.

      Proposal is just to continue logging webhdfs as the proto for http WebHDFS commands, but log swebhdfs for SWebHDFS (over https). This will be incompatible.

        Attachments

          Activity

            People

            • Assignee:
              vagarychen Chen Liang
              Reporter:
              xkrogen Erik Krogen
            • Votes:
              0 Vote for this issue
              Watchers:
              8 Start watching this issue

              Dates

              • Created:
                Updated: