Managing Auditing

Enabling auditing of filesystem and table operations requires running a command on a cluster, a command on individual volumes in the cluster, and a command on individual directories, files, and MapR-DB tables within those volumes.

These steps are summarized in the following table:

  Steps to enable auditing

Enable auditing of cluster administration

Enable data auditing on the cluster

Enable auditing of individual volumes

Enable auditing of individual directories, files, and MapR-DB tables

Auditing of cluster administration

Not applicable

Not applicable

Not applicable

Auditing of directories, files, and MapR-DB tables

Not applicable

Prerequisites for enabling auditing

  • If you upgraded your MapR cluster from version 4.1 or earlier, you must enable the auditing feature.
    • Run maprcli config save -values {"mfs.feature.audit.support":"1"}
    • To verify that the feature is enabled, run maprcli config load -json | grep "mfs.feature.audit.support"
  • Only the root user or mapr user can enable or disable auditing.