Hi, all:
   I want to config audit log for hive 1.2.1. 
   I use kerberos for hive authentication, and did not start up the hive 
metastore service.
   Just under such a background,I opened hive autid-log function. But the log 
contents like this:
"HiveMetaStore.java:logAuditEvent(371) - ugi=ocp ip=unknown-ip-addr 
cmd=get_table : db=default pat=*"

My $HIVE_HOME is on the same machine with hive metastore(MySQL)。I don't know 
why the IP addr is "unknown-ip-addr". I looked into hive source code,and found 
some useful info:
"
// This will return null if the metastore is not being accessed from a 
metastore Thrift server,
    // or if the TTransport being used to connect is not an instance of 
TSocket, or if kereberos
    // is used
    public static String getThreadLocalIpAddress() {
      return threadLocalIpAddress.get();
    }"

Does this means if I used kerberos and didn't startup metastore service by 
"hive --service metastore", the ip-addr will always be "unknown-ip-addr"? 
and by the way, the cmd is just like this "cmd=get_table:db=default pat=*" or 
"cmd=get_functions:db=default pat=*",etc? the audit log cannot record full 
specific sql? 


Thanks in advance for any reply.

Maria.


Reply via email to