hive. 3.0+开启metastore审计日志

兜兜转转的各种测试，纠结几天，怎么开启hive metastore的审计日志，官网没有说明，网上没有人使用hive 3.0+版本开启metastore审计日志。hive 3.0+使用的日志是log4j2，hive 1.0版本是使用log4j，所以网上hive开启审计日志都是log4j

修改hive-log4j2.properties文件

1、增加写入日志的文件名

property.hive.log.fileAudit = audit.log

2、list all appenders增加DRFB(DRFB为下面定义的名称)

3、在loggers里面增加HiveMetaStore

4、增加日志写入方式(完全照抄之前存在的DRFA)，只是名称和路径不一样

# daily rolling file appender
appender.DRFB.type = RollingFile
appender.DRFB.name = DRFB
appender.DRFB.fileName = ${sys:hive.log.dir}/${sys:hive.log.fileAudit}
# Use %pid in the filePattern to append process-id@host-name to the filename if you want separate log files for different CLI session
appender.DRFB.filePattern = ${sys:hive.log.dir}/${sys:hive.log.fileAudit}.%d{yyyy-MM-dd}_%i.gz
appender.DRFB.layout.type = PatternLayout
appender.DRFB.layout.pattern = %d{ISO8601} %-5p [%t]: %c{2} (%F:%M(%L)) - %m%n
appender.DRFB.policies.type = Policies
appender.DRFB.policies.time.type = TimeBasedTriggeringPolicy
appender.DRFB.policies.time.interval = 1
appender.DRFB.policies.time.modulate = true
appender.DRFB.strategy.type = DefaultRolloverStrategy
appender.DRFB.strategy.max = 30
appender.DRFB.policies.fsize.type = SizeBasedTriggeringPolicy
appender.DRFB.policies.fsize.size = 256MB

5、添加audit log的名称

#add hive metastore audit log
logger.HiveMetaStore.name = org.apache.hadoop.hive.metastore.HiveMetaStore.audit
logger.HiveMetaStore.level = INFO
logger.HiveMetaStore.appenderRef.all.ref = DRFB

其他补充说明：hive怎么找到hive-log4j2.properties配置文件的呢？通过hive.log4j.file属性配置，如果没有指定，那么就会自动加载hive-log4j2.properties配置

那么beeline-log4j2.properties又是怎么找到的呢？它是通过bin/ext/beeline.sh配置的(-Dlog4j.configurationFile=beeline-log4j2.properties)