[HDFS-16266] Add remote port information to HDFS audit log

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 3.4.0, 3.3.5
• Labels: pull-request-available
• Assignee: Tao Li
• Reporter: Tao Li
• Created: 10/Oct/21 14:10
• Updated: 23/Feb/23 07:59
• Resolved: 04/Nov/21 01:17

Description

In our production environment, we occasionally encounter a problem where a user submits an abnormal computation task, causing a sudden flood of requests, which causes the queueTime and processingTime of the Namenode to rise very high, causing a large backlog of tasks.

We usually locate and kill specific Spark, Flink, or MapReduce tasks based on metrics and audit logs. Currently, IP and UGI are recorded in audit logs, but there is no port information, so it is difficult to locate specific processes sometimes. Therefore, I propose that we add the port information to the audit log, so that we can easily track the upstream process.

Currently, some projects contain port information in audit logs, such as Hbase and Alluxio. I think it is also necessary to add port information for HDFS audit logs.

Issue Links

• links to: GitHub Pull Request #3538