Differentiate Events from Multiple Clusters

How to differentiate events from multiple clusters when managing audits in Ranger.

To differentiate the audit events generated by multiple ephemeral clusters that are stored in the same shared service cluster, you can define a cluster name. The cluster name is visible in Ranger>Auditing>Access and Ranger>Auditing>Plugins.

From Ambari > $Component > Configs > Advanced > ranger-$component-audit, define a value for ranger.plugin.$component.ambari.cluster.name=$cluster_name .
Restart Ranger and the component.

For example, in Ambari>HDFS>Configs>Advanced>ranger-hdfs-audit: ranger.plugin.hdfs.ambari.cluster.name=cluster_c6700.