Search code examples
apache-kafkaapache-kafka-connectconfluent-cloud

Confluent Cloud Kafka - Audit Log Cluster : Sink Connector


For Kafka cluster hosted in Confluent Cloud, there is an Audit Log cluster that gets created. It seems to be possible to hook a Sink connector to this cluster and drain the events out from "confluent-audit-log-events" topic.

However, I am running into the below error when I run the connector to do the same.

org.apache.kafka.common.errors.TopicAuthorizationException: Not authorized to access topics: [connect-offsets]

In my connect-distributed.properties file, I have the settings as :

offset.storage.topic=connect-offsets
offset.storage.replication.factor=3
offset.storage.partitions=3

What extra permission/s needs to be granted so that the connector can create the required topics in the cluster? The key/secret being used in the connect-distributed.properties files is a valid key/secret that is associated to the service account for this cluster.

Also, when I run the consumer in the console using the same key (as above) , I am able to read the audit log events just fine.


Solution

  • It's confirmed that this feature (hooking up a connector to the Audit Log cluster) is not supported at the moment in Confluent Cloud. This feature may be available later this year at some point.