[HIVE-21943] Add audit log in HiveServer2

• Type: Improvement
• Status: Patch Available
• Priority: Major
• Resolution: Unresolved
• Affects Version/s: 1.2.2, 2.2.0, 3.1.0
• Component/s: HiveServer2, Logging
• Target Version/s: 4.0.0
• Assignee: Hui An
• Reporter: Hui An
• Created: 02/Jul/19 11:42
• Updated: 30/Jul/19 01:57

Description

Currently, we have audit log in the metastore( see HIVE-1948), which provides us useful info, like metadata operations, ip address, etc. But when we use HS2 to connect HMS, all operations would assoicate with HS2's ip address, not actual user's ip address. This could cause difficult problems when we want to locate the actual user. So I am wondering if we could add audit log in the HS2 too?

We could add much infomation in the audit log of HS2, like username, ipAddress, queryId, queryStr, etc.

Issue Links

• links to: Code Review