This is the documentation for Cloudera Navigator 1.2.0.
Documentation for other versions is available at Cloudera Documentation.

Cloudera Navigator Requirements

Cloudera Manager Requirements

This section describes the Cloudera Navigator requirements for Cloudera Manager.

Cloudera Navigator 1.2.0 is available with Cloudera Manager 5.0.0. For information on the requirements for installing Cloudera Manager, see Requirements for Cloudera Manager.

Cloudera Navigator Auditing Component

This section describes the service versions and audited operations supported by the Cloudera Navigator auditing component.

Supported Audit Databases

The Cloudera Navigator auditing component supports the following databases for storing audit events:
  • MySQL - 5.5 and 5.6
  • Oracle - 11g Release 2
  • PostgreSQL - 8.1, 8.4, and 9.2

Supported Service Versions and Audited Operations

  • HDFS - Minimum supported version: CDH 4.0.0.
    The captured operations are:
    • Operations that access or modify a file's or directory's data or metadata
    • Operations denied due to lack of privileges
  • HBase - Minimum supported version: CDH 4.0.0.
      Note:
    • In CDH versions less than 4.2.0, for grant and revoke operations, the operation in log events is ADMIN
    • In simple authentication mode, if the HBase Secure RPC Engine property is false (the default), the username in log events is UNKNOWN. To see a meaningful user name:
      1. Click the HBase service.
      2. Select Configuration > View and Edit > Service-wide > Security.
      3. Set the HBase Secure RPC Engine property to true.
      4. Save the change and restart the service.
  • Hive - Minimum supported versions: CDH 4.2.0, CDH 4.4.0 for operations denied due to lack of privileges.
    The captured operations are:
    • Operations (except grant, revoke, and metadata access only) sent to HiveServer2
    • Operations denied due to lack of privileges
      Note:
    • Actions taken against Hive via the Hive CLI are not audited.
    • In simple authentication mode, the username in log events is the username passed in the HiveServer2 connect command. If you do not pass a username in the connect command, the username is log events is anonymous.
  • Hue - Minimum supported version: CDH 4.2.0.
    The captured operations are:
    • Operations (except grant, revoke, and metadata access only) sent to Beeswax Server
      Note: You do not directly configure the Hue service for auditing. Instead, when you configure the Hive service for auditing, operations sent to the Hive service through Beeswax appear in the Hue service audit log.
  • Cloudera Impala - Minimum supported version: Cloudera Impala 1.2.0.
    The captured operations are:
    • Queries denied due to lack of privileges
    • Queries that pass analysis

Cloudera Navigator Metadata Component

This section describes the service versions and audited operations supported by the Cloudera Navigator metadata component.

Supported Product Versions

CDH - 4.4.0 and higher for all components except Pig. For Pig, CDH 4.6.0 and higher.