探寻hdfs-audit log -1

最近集群压力较大，为了缓解集群压力，开始分析hdfs-audit log。对于hdfs-audit 审计日志，我们先看一些常用命令；

cmd 命令解释：

getfileinfo

mkdirs

setAcl -- checkOperation(OperationCategory.WRITE);

getAclStatus -- checkOperation(OperationCategory.READ);

ret = FSDirAclOp.getAclStatus(dir, pc, src);

logAuditEvent(true, operationName, src);

getEZForPath -- Get the encryption zone for the specified path.

rename -- Change the indicated filename.

open -- Get block locations within the specified range.

 样式：

hdfs-audit源码分类：read/write

OperationCategory.READ

 

operationName = "listOpenFiles";

operationName = "open";

operationName = "getAdditionalBlock";

operationName = needBlockToken ? "open" : "getfileinfo";

operationName = "isFileClosed";

operationName = "contentSummary";

operationName = "quotaUsage";

operationName = "listStatus";

operationName = "listSnapshottableDirectory";

operationName = "computeSnapshotDiff";

operationName = "computeSnapshotDiff";

operationName = "queryRollingUpgrade";

operationName = "listCacheDirectives";

operationName = "listCacheDirectives";

operationName = "getAclStatus";

operationName = "getEZForPath";

operationName = "listEncryptionZones";

operationName = "listReencryptionStatus";

operationName = "getErasureCodingPolicy";

operationName = "getXAttrs";

operationName = "listXAttrs";

operationName = "checkAccess";

OperationCategory.WRITE

operationName = "setPermission";

operationName = "concat";

operationName = "setTimes";

operationName = "truncate";

operationName = "createSymlink";

operationName = "setReplication";

operationName = "setStoragePolicy";

operationName = "satisfyStoragePolicy";

operationName = "unsetStoragePolicy";

operationName = "rename";

operationName = "delete";

operationName = "mkdirs";

operationName = "setBalancerBandwidth";

operationName = "getDelegationToken";

operationName = "renewDelegationToken";

operationName = "cancelDelegationToken";

operationName = "disallowSnapshot";

operationName = "createSnapshot";

operationName = "renameSnapshot";

operationName = "deleteSnapshot";

operationName = "startRollingUpgrade";

operationName = "finalizeRollingUpgrade";

operationName = "addCacheDirective";

operationName = "modifyCacheDirective";

operationName = "removeCacheDirective";

operationName = "modifyCachePool";

operationName = "setAcl";

operationName = "setReplication";

operationName = "append";