[RANGER-3411] Improvements for Elasticsearch Audit Log Provider

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Component/s: audit
• Assignee: Unassigned
• Reporter: Andrew Charneski
• Created: 13/Sep/21 17:20
• Updated: 13/Sep/21 20:23

Description

Several improvements are needed to make the Elasticsearch audit log provider viable:

1. Configuration and setup scripts need to support settings for the port, scheme, and index
2. Audit log search logic can remove the "fetch" call after the "searchResources" call to Elasticsearch
3. xasecure.audit.elasticsearch.is.enabled should be supported to enable this provider
4. AuditProviderFactory.java needs logic changes to allow enabling the provider