HDP on Linux – Installation Forum

Hadoop Audit logs

  • #33079
    Ardavan Moinzadeh

    I know that HDFS has the ability to log all file system access requests and in HDP is set to INFO by default, is there a way to see what users have accessed HDFS ? This is what I am currently seeing in hdfs-audit.log
    2013-08-23 00:06:31,257 INFO FSNamesystem.audit: ugi=hbase ip=/X.X.X cmd=listStatus src=/apps/hbase/data dst=null perm=null

    In this scenario I want to see what user have accessed hbase.

    Thank you

to create new topics or reply. | New User Registration

  • Author
  • #33080

    Hi Ardavan,

    You could tally up the times with /var/log/secure and see which user issued the su or sudo command to the user hbase.
    I am unaware of any way to trace this in HDFS due to the way the underlying UNIX system works. I.E the request comes from hbase as we can’t see the user before hand (especially due to su or sudo as a new shell is initiated)



You must be to reply to this topic. | Create Account

Support from the Experts

A HDP Support Subscription connects you experts with deep experience running Apache Hadoop in production, at-scale on the most demanding workloads.

Enterprise Support »

Become HDP Certified

Real world training designed by the core architects of Hadoop. Scenario-based training courses are available in-classroom or online from anywhere in the world

Training »

Hortonworks Data Platform
The Hortonworks Data Platform is a 100% open source distribution of Apache Hadoop that is truly enterprise grade having been built, tested and hardened with enterprise rigor.
Get started with Sandbox
Hortonworks Sandbox is a self-contained virtual machine with Apache Hadoop pre-configured alongside a set of hands-on, step-by-step Hadoop tutorials.
Modern Data Architecture
Tackle the challenges of big data. Hadoop integrates with existing EDW, RDBMS and MPP systems to deliver lower cost, higher capacity infrastructure.