Audit to DataBase
Note: Audit to DB will not be available from 0.6 version.
Audit to DB | Description | Sample Value | Data Type | Introduced in Version |
|---|---|---|---|---|
| id | Unique Id or Row id of audit log event | 85f0f6d7-2415-44e6-b277-6751d6c86ac7-3 | Number/String | 0.4 |
| create_time | Audit insert timestamp | 2016-10-12 6:11:45 | datetime | 0.4 |
| update_time | Audit update timestamp | 2016-10-12 6:11:45 | datetime | 0.4 |
| added_by_id | user id of user whoever added the audit log | 1 | Number | 0.4 |
| upd_by_id | user id of user whoever updated the audit log | 1 | Number | 0.4 |
| audit_type | audit type | Number | 0.4 | |
| access_result | access result | 0(Access) or 1 (Denied) | Number | 0.4 |
| access_type | Access type of executed event | READ/WRITE/SELECT etc. | String | 0.4 |
| acl_enforcer | Access enforcer | hadoop-acl/ranger-acl | String | 0.4 |
| agent_id | String | 0.4 | ||
| client_ip | Ip address of machine from where event was performed | 10.0.0.1 | String | 0.4 |
| client_type | String | 0.4 | ||
| policy_id | Policy id of the resource on which access event was executed | 1 | Number | 0.4 |
| repo_name | Repository Name | hadoopdev | String | 0.4 |
| repo_type | Repository Type | HDFS/HIVE/HBase | Number | 0.4 |
| result_reason | testdb/testtable/column1 | String | 0.4 | |
| session_id | session id | a2468ab5-1da3-4c93-ba4d-d6604a86590f | String | 0.4 |
| event_time | event request timestamp | 2016-10-12 6:11:45 | datetime | 0.4 |
| request_user | user whoever requested the access | ranger | String | 0.4 |
| action | operation performed | QUERY/write | String | 0.4 |
| request_data | data on command send for access request | select * from TestDb.TestTable | String | 0.4 |
| resource_path | resource path | testdb/testtable/column1 | String | 0.4 |
| resource_type | Type of accessed resource | @column | String | 0.4 |
| seq_num | sequence number of audit log | 1 | Number | 0.5 |
| event_count | no of similar event executed in specific interval | 3 | Number | 0.5 |
| event_dur_ms | event execution time in ms | 10 | Number | 0.5 |