Apache Ranger · Schema
AuditEntry
Single access audit log entry
Access ControlAuthorizationHadoopPolicy ManagementSecurityApacheOpen Source
Properties
| Name | Type | Description |
|---|---|---|
| id | string | Audit entry identifier |
| user | string | User who accessed the resource |
| resourceType | string | Type of resource accessed |
| resourcePath | string | Path of the accessed resource |
| accessType | string | Type of access (read, write, etc.) |
| result | integer | Access result (1=allowed, 0=denied) |
| aclEnforcer | string | ACL enforcer that made the decision |
| agentId | string | Agent/plugin that reported the audit |
| repoName | string | Repository/service name |
| sessionId | string | Session identifier |
| clientIP | string | Client IP address |
| eventTime | string | Time of access event |
JSON Schema
{
"$schema": "https://json-schema.org/draft/2020-12/schema",
"$id": "https://raw.githubusercontent.com/api-evangelist/apache-ranger/refs/heads/main/json-schema/apache-ranger-audit-entry-schema.json",
"title": "AuditEntry",
"description": "Single access audit log entry",
"type": "object",
"properties": {
"id": {
"type": "string",
"description": "Audit entry identifier"
},
"user": {
"type": "string",
"description": "User who accessed the resource"
},
"resourceType": {
"type": "string",
"description": "Type of resource accessed"
},
"resourcePath": {
"type": "string",
"description": "Path of the accessed resource"
},
"accessType": {
"type": "string",
"description": "Type of access (read, write, etc.)"
},
"result": {
"type": "integer",
"description": "Access result (1=allowed, 0=denied)"
},
"aclEnforcer": {
"type": "string",
"description": "ACL enforcer that made the decision"
},
"agentId": {
"type": "string",
"description": "Agent/plugin that reported the audit"
},
"repoName": {
"type": "string",
"description": "Repository/service name"
},
"sessionId": {
"type": "string",
"description": "Session identifier"
},
"clientIP": {
"type": "string",
"description": "Client IP address"
},
"eventTime": {
"type": "string",
"format": "date-time",
"description": "Time of access event"
}
}
}