Configuring auditing for a DSE Search cluster

If auditing is enabled, DSE Search nodes do not require additional configuration. If the filter-mapping element in the Apache Solr™ web.xml file is commented out, the auditor cannot log anything from Solr.

Procedure

If necessary, uncomment the filter-mapping element in the Solr web.xml file.

<filter-mapping>
    <filter-name>DseAuditLoggingFilter</filter-name>
    <url-pattern>/*</url-pattern>
</filter-mapping>

Here is an example of the data audit log of a Solr query:

host:/10.245.214.159|source:127.0.0.1|user:jdoe|timestamp:1356045339910|category:QUERY
  |type:SOLR_QUERY|ks:wiki|cf:solr|operation:/wiki.solr/select/?q=body:trains

Configuring auditing for a DSE Search cluster

Procedure

Was this helpful?

Give Feedback