Any way to store Ranger audit log on Ozone?

[yazynin]

I tried use this setting for ranger plugin

<property> <name>xasecure.audit.destination.hdfs.dir</name> <value>ofs://cluster1/ranger/audit</value> </property>

but didn't work

2024-01-10 17:19:20,405 INFO org.apache.ranger.audit.provider.BaseAuditHandler: Audit Status Log: name=ozone.async.summary.multi_dest.batch.hdfs, interval=01:00.010 minutes, events=1, deferredCount=1, totalEvents=5, totalDeferredCount=5 2024-01-10 17:19:20,406 INFO org.apache.ranger.audit.utils.AbstractRangerAuditWriter: Creating new log file. auditPath=ofs://cluster1/ranger/audit/ozone/20240110/ozone_ranger_audit_host.com.log 2024-01-10 17:19:20,406 INFO org.apache.ranger.audit.utils.AbstractRangerAuditWriter: Returning nullFilesystem Config: Configuration: core-default.xml, core-site.xml, hdfs-default.xml, hdfs-site.xml, hdfs-rbf-default.xml, hdfs-rbf-site.xml 2024-01-10 17:19:20,416 INFO org.apache.ranger.audit.destination.HDFSAuditDestination: Flushing HDFS audit. Event Size:1 2024-01-10 17:19:20,416 INFO org.apache.ranger.audit.destination.HDFSAuditDestination: Flush called. name=ozone.async.summary.multi_dest.batch.hdfs 2024-01-10 17:19:20,416 INFO org.apache.ranger.audit.utils.RangerJSONAuditWriter: Flush called. name=hdfs 2024-01-10 17:19:20,416 ERROR org.apache.ranger.audit.queue.AuditFileSpool: Error sending logs to consumer. provider=ozone.async.summary.multi_dest.batch, consumer=ozone.async.summary.multi_dest.batch.hdfs 2024-01-10 17:19:20,417 INFO org.apache.ranger.audit.queue.AuditFileSpool: Destination is down. sleeping for 30000 milli seconds. indexQueue=0, queueName=ozone.async.summary.multi_dest.batch, consumer=ozone.async.summary.multi_dest.batch.hdfs

[kerneltime]

@yazynin was the ranger plugin running within Ozone's OM or were you trying to use a different Ranger plugin but use Ozone as the destination? Can you provide more details about your setup?

[yazynin]

Any suggestions?

[kerneltime]

Did you include the ozone file system jar in the classpath for Ranger when writing audit files?

[yazynin]

not know how correct check this

[yazynin]

Fixed, need add to /opt/ozone/share/ozone/lib/libext/ranger-ozone-plugin-impl ozone-filesystem-.jar and ozone-filesystem-common-.jar