Having problem where queries done on mapr audit logs are showing rows where the "user" column values are totally wrong (I don't know if this would happen with other log files since have only been testing on mapr audit logs and don't really have any other files similar to the mapr audit logs to cross-test on).
Please see the image below:
Notice that the query specifies the user "rvillanueva", yet the table presented has the user "mapr", while at the same time the uid is that of rvillanuneva 5002 (mapr's uid is 5000). This seems obviously wrong to me (would expect the user to be "rvillanueva"). Could it have something to do with the fact that I was connected to drill explorer as user mapr at the time of entering the query (to me this seems unlikely since I also sign into the drill web UI as mapr for what will be shown next)?
which we can see gives the correct user name and uid.
I don't really know what to make of this, so if anyone has any opinions would like to hear them. Thanks.