Differentiate Events from Multiple Clusters
To differentiate the audit events generated by multiple ephemeral clusters that are stored in the same shared service cluster, you can define a cluster name. The cluster name is visible in Ranger>Auditing>Access and Ranger>Auditing>Plugins.
From Ambari>
component>Configs>Advanced>ranger-component-audit, define a value forranger.plugin..component.ambari.cluster.name=cluster_nameRestart Ranger and the component.
For example, in Ambari>HDFS>Configs>Advanced>ranger-hdfs-audit:
ranger.plugin.hdfs.ambari.cluster.name=cluster_c6700.