Check audit logs based on event create time

Previously used timestamp would never detect the delete event as the entity update time doesn't get updated on delete
atlanhq · Aug 13, 2024 · fba51ff · fba51ff
1 parent bb29a22
commit fba51ff
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/webapp/src/main/java/org/apache/atlas/web/rest/AuthREST.java b/webapp/src/main/java/org/apache/atlas/web/rest/AuthREST.java
@@ -198,12 +198,12 @@ private Long getLastEditTime(String serviceName, long lastUpdatedTime) {
         mustClauseList.add(getMap("terms", getMap("typeName", entityUpdateToWatch)));
 
         lastUpdatedTime = lastUpdatedTime == -1 ? 0 : lastUpdatedTime;
-        mustClauseList.add(getMap("range", getMap("timestamp", getMap("gte", lastUpdatedTime))));
+        mustClauseList.add(getMap("range", getMap("created", getMap("gte", lastUpdatedTime))));
 
         dsl.put("query", getMap("bool", getMap("must", mustClauseList)));
 
         List<Map<String, Object>> sortList = new ArrayList<>();
-        sortList.add(getMap("timestamp", "desc"));
+        sortList.add(getMap("created", "desc"));
         dsl.put("sort", sortList);
 
         parameters.setDsl(dsl);
@@ -217,7 +217,7 @@ private Long getLastEditTime(String serviceName, long lastUpdatedTime) {
                     if (!EntityAuditEventV2.EntityAuditActionV2.getDeleteActions().contains(lastAuditLog.getAction())) {
                         lastEditTime = lastAuditLog.getTimestamp();
                     } else {
-                        LOG.info("found delete action, so ignoring the last edit time: {}", lastAuditLog.getTimestamp());
+                        LOG.info("ES_SYNC_FIX: {}: found delete action, so ignoring the last edit time: {}", serviceName, lastAuditLog.getTimestamp());
                     }
                 } else {
                     lastEditTime = null; // no edits found