Details
-
Improvement
-
Status: Closed
-
Minor
-
Resolution: Not A Problem
-
0.92.2, 0.94.1, 0.95.2
-
None
-
None
-
AccessController coprocessor
Description
The HBase AccessController can emit a detailed trace of every action, and whether it succeeded or failed, but this is expected to be used only for debugging an application in a staging environment. In production a RegionServer may have thousands of requests per second, logging the audit trace just isn't viable. However, we might want to log the AccessDeniedExceptions which result from access failures in the daemon logs like Hadoop does, e.g. the NameNode log.
Attachments
Issue Links
- is part of
-
HBASE-6096 AccessController v2
- Closed
- is related to
-
HBASE-10796 Set default log level as INFO
- Closed