Problem Statement :
Currently audit event timestamp is converted to UTC timestamp at Plugin end and then it is sent to audit stores, Since Date object picks local timezone info from System, local timezone info is passed to Solr rather than UTC.
Since Solr engine does the conversion of all received Date object to UTC timestamp, due to mismatched timezone info, Solr again does the conversion on received timestamp, which leads to insertion of wrong event timestamp. if any user tries to search any audit event log then he might not get the expected result or audit logs of provided event.
Proposed Solution :
Send new Date object value as audit event time to Solr Doc, if audit store is Solr.
- is duplicated by
RANGER-719 Audit in RangerAdmin doesn't show latest audits in UI if server is on different timezone
- links to