• MapReduce Service

mrs
  1. Help Center
  2. MapReduce Service
  3. User Guide
  4. MRS Manager Operation Guide
  5. Log Management
  6. Configuring Audit Log Export Parameters

Configuring Audit Log Export Parameters

Scenario

If MRS audit logs are stored in the system for a long time, the disk space for data directories may become insufficient. You can set export parameters to automatically export audit logs to a specified directory on the OBS.

NOTE:

The audit logs to be exported include both the service and management audit logs.

  • Service audit logs are compressed automatically at 03:00 a.m. every day and save in /var/log/Bigdata/audit/bk/ on the active management node. The file name format is <yyyy-MM-dd_HH-mm-ss>.tar.gz. A maximum of seven log files can be saved by default. After the number of files has reached the maximum value, the earliest file will be deleted when a new one is generated.
  • When you export management audit logs, the logs that are generated between the time of the last successful export and the current time are exported. When the number of records in a management audit log reaches 100,000, the system dumps the first 90,000 records to a local file and retains the rest 10,000 records in the database. The log file is dumped to ${BIGDATA_DATA_HOME}/dbdata_om/dumpData/iam/operatelog on the active management node. The file name format is OperateLog_store_YY_MM_DD_HH_MM_SS.csv. A maximum of 50 management audit logs can be saved.

Prerequisites

  • You have obtained the AK and SK of the username. For details, see My Credential > User Guide > How Do I Manage Access Keys?.
  • You have created a bucket in the OBS. For details, see Object Storage Service > User Guide > Quick Start > Common Operations Using OBS Console > Creating a Bucket.

Procedure

  1. On MRS Manager, click System.
  2. Click Export Audit Log in Maintenance.

    Table 1 Parameters for exporting audit logs

    Parameter

    Value

    Description

    Export Audit Log

    •  
    •  

    Mandatory

    Indicates whether to enable the audit log export function.

    • : Enabled
    • : Disabled

    Start Time

    7/24/2017 09:00:00 (example value)

    Mandatory

    Indicates the start time for audit log export.

    Period

    1 day (example value)

    Mandatory

    Indicates the interval for exporting audit logs. The value ranges from 1 day to 5 days.

    Bucket

    mrs-bucket (example value)

    Mandatory

    Indicates the name of the OBS bucket to which audit logs are exported.

    OBS Path

    opt/omm/oms/auditLog (example value)

    Mandatory

    Indicates the OBS path for exporting audit logs.

    AK

    XXX (example value)

    Mandatory

    Indicates the user's Access Key ID (AK) information.

    SK

    XXX (example value)

    Mandatory

    Indicates the user's Secret Access Key (SK) information.

    NOTE:

    The OBS path is divided into service_auditlog and manager_auditlog, which are used to save service and management audit logs, respectively.