Java Code Examples for org.apache.ranger.audit.model.AuthzAuditEvent#setClientIP()

The following examples show how to use org.apache.ranger.audit.model.AuthzAuditEvent#setClientIP() . You can vote up the ones you like or vote down the ones you don't like, and go to the original project or source file by following the links above each example. You may check out the related API usage on the sidebar.
Example 1
Source File: ElasticSearchAccessAuditsServiceTest.java    From ranger with Apache License 2.0 5 votes vote down vote up
private AuthzAuditEvent getAuthzAuditEvent() {
    AuthzAuditEvent event = new AuthzAuditEvent();
    event.setAccessResult((short) 1);
    event.setAccessType("");
    event.setAclEnforcer("");
    event.setAction("");
    event.setAdditionalInfo("");
    event.setAgentHostname("");
    event.setAgentId("");
    event.setClientIP("");
    event.setClusterName("");
    event.setClientType("");
    event.setEventCount(1);
    event.setEventDurationMS(1);
    event.setEventId("");
    event.setEventTime(new Date());
    event.setLogType("");
    event.setPolicyId(1);
    event.setPolicyVersion(1l);
    event.setRepositoryName("");
    event.setRequestData("");
    event.setRepositoryName("");
    event.setRepositoryType(1);
    event.setResourcePath("");
    event.setResultReason("");
    event.setSeqNum(1);
    event.setSessionId("");
    event.setTags(new HashSet<>());
    event.setUser("");
    event.setZoneName("");
    return event;
}
 
Example 2
Source File: RangerDefaultAuditHandler.java    From ranger with Apache License 2.0 4 votes vote down vote up
public AuthzAuditEvent getAuthzEvents(RangerAccessResult result) {
	if(LOG.isDebugEnabled()) {
		LOG.debug("==> RangerDefaultAuditHandler.getAuthzEvents(" + result + ")");
	}

	AuthzAuditEvent ret = null;

	RangerAccessRequest request = result != null ? result.getAccessRequest() : null;

	if(request != null && result != null && result.getIsAudited()) {
		//RangerServiceDef     serviceDef   = result.getServiceDef();
		RangerAccessResource resource     = request.getResource();
		String               resourceType = resource == null ? null : resource.getLeafName();
		String               resourcePath = resource == null ? null : resource.getAsString();

		ret = createAuthzAuditEvent();

		ret.setRepositoryName(result.getServiceName());
		ret.setRepositoryType(result.getServiceType());
		ret.setResourceType(resourceType);
		ret.setResourcePath(resourcePath);
		ret.setRequestData(request.getRequestData());
		ret.setEventTime(request.getAccessTime() != null ? request.getAccessTime() : new Date());
		ret.setUser(request.getUser());
		ret.setAction(request.getAccessType());
		ret.setAccessResult((short) (result.getIsAllowed() ? 1 : 0));
		ret.setPolicyId(result.getPolicyId());
		ret.setAccessType(request.getAction());
		ret.setClientIP(request.getClientIPAddress());
		ret.setClientType(request.getClientType());
		ret.setSessionId(request.getSessionId());
		ret.setAclEnforcer(moduleName);
		Set<String> tags = getTags(request);
		if (tags != null) {
			ret.setTags(tags);
		}
		ret.setAdditionalInfo(getAdditionalInfo(request));
		ret.setClusterName(request.getClusterName());
		ret.setZoneName(result.getZoneName());
		ret.setAgentHostname(restUtils.getAgentHostname());
		ret.setPolicyVersion(result.getPolicyVersion());

		populateDefaults(ret);

		result.setAuditLogId(ret.getEventId());
	}

	if(LOG.isDebugEnabled()) {
		LOG.debug("<== RangerDefaultAuditHandler.getAuthzEvents(" + result + "): " + ret);
	}

	return ret;
}
 
Example 3
Source File: TestEvents.java    From ranger with Apache License 2.0 4 votes vote down vote up
private static AuditEventBase getTestEvent(int idx) {
    AuthzAuditEvent event = new AuthzAuditEvent();

    event.setClientIP("127.0.0.1");
    event.setAccessResult((short)(idx % 2 > 0 ? 1 : 0));
    event.setAclEnforcer("ranger-acl");

    switch(idx % 5) {
        case 0:
            event.setRepositoryName("hdfsdev");
            event.setRepositoryType(EnumRepositoryType.HDFS);
            event.setResourcePath("/tmp/test-audit.log");
            event.setResourceType("file");
            event.setAccessType("read");
            if(idx % 2 > 0) {
                event.setAclEnforcer("hadoop-acl");
            }
        break;
        case 1:
            event.setRepositoryName("hbasedev");
            event.setRepositoryType(EnumRepositoryType.HBASE);
            event.setResourcePath("test_table/test_cf/test_col");
            event.setResourceType("column");
            event.setAccessType("read");
        break;
        case 2:
            event.setRepositoryName("hivedev");
            event.setRepositoryType(EnumRepositoryType.HIVE);
            event.setResourcePath("test_database/test_table/test_col");
            event.setResourceType("column");
            event.setAccessType("select");
        break;
        case 3:
            event.setRepositoryName("knoxdev");
            event.setRepositoryType(EnumRepositoryType.KNOX);
            event.setResourcePath("topologies/ranger-admin");
            event.setResourceType("service");
            event.setAccessType("get");
        break;
        case 4:
            event.setRepositoryName("stormdev");
            event.setRepositoryType(EnumRepositoryType.STORM);
            event.setResourcePath("topologies/read-finance-stream");
            event.setResourceType("topology");
            event.setAccessType("submit");
        break;
    }
    event.setEventTime(new Date());
    event.setResultReason(Integer.toString(idx));

    return event;
}