Create Hive Connections

This section describes the basics of creating a connection to Hive from Designer Cloud Enterprise Edition and modifying it based on your cluster environment.

For more information on supported versions of Hive, see Configure for Hive.

Limitations

For more information on how the platform works with Hive, see Using Hive.

Create Encryption Key File

Before you create your Hive connection, you must create and reference an encryption key file. If you have not created one already, see Create Encryption Key File.

Create Hive Connection

You can create the connection through the application, the command line interface, or the APIs.

Create through application

A Alteryx administrator can create the Hive connection through the application.

Steps:

1. Login to the application.
2. In the menu, select Settings menu > Settings > Connections.
3. In the Create Connection page, click the Hive connection card.

4. Specify the properties for your Hive database. 

   1. Before you create the connection, you should review the rest of this section to verify that you are using the proper connection string options for the Hive connection to work in your environment. 
      

      NOTE: If secure impersonation is enabled on your cluster, you must include the Hive principal as part of your connection string. For more information, see Configure for Hive.

      
      

   2. For more information, see Create Connection Window.

5. Click Save. 

Create through CLI

This connection can also be created through the Alteryx command line interface. Notes on creating the connection:

• If you are creating a Hive connection in an environment where HTTP is deployed or security features such as SSL, user impersonation, or Kerberos are deployed, please be sure to read the remainder of this section before creating the connection.
• This connection must be created by a Alteryx administrator and must be created as a global connection. You can create only one connection of this type.
• By default, the platform connects to Hive over TCP. If you need to connect over HTTP, additional configuration is required as part of the create connection step. See Configure for HTTP below.

The CLI tools are stored in the following directory:

/opt/trifacta/bin/

Example command (all one command):

./trifacta_cli.py create_connection --user_name <trifacta_admin_username> --password <trifacta_admin_password> 
--conn_type hadoop_hive --conn_name aHiveConnection 
--conn_description "This is my Hive connection." 
--conn_host example.com --conn_port 10000 
--conn_credential_type trifacta_service --conn_params_location ~/.trifacta/p.json 
--conn_is_global --cli_output_path ./conn_create.out

Example Params file:

A parameter file containing the following information must be accessible within the Alteryx deployment directory. Please add a reference to this file in your command.

Example:

{
  "defaultDatabase":"default",
  "jdbc": "hive2"
}

For more information on the Alteryx command line interface, see CLI for Connections.

Create via API

For more information, see API Connections Create v3.

Additional Configuration Options

Configure for HTTP

By default, the Designer Cloud Powered by Trifacta platform utilizes TCP to connect to Hive. As needed, the platform can be configured to interact with HiveServer2 over HTTP. 

Steps:

To enable the Designer Cloud Powered by Trifacta platform to use HTTP when connecting to Hive, please do the following.

1. Create a params file for your Hive connection. This file must contain at least the following entry:

       "connectStrOpts": ";transportMode=http;httpPath=cliservice"

2. Save the file. 
3. In your CLI command, set the value of --conn_port = 10001.

4. Execute the command.

5. Test the Hive connection.

6. If it's not working, delete the connection and try again.

Configure for SASL

The steps below describe how to enable the SASL-QOP method of SASL (Simple Authentication and Security Layer) communications. To enable, you must add an additional connection string parameter.

Steps:

1. Create or edit the params file for your connection to Hive. This file must include the following setting for connectStrOpts:

   {
     "connectStrOpts": ";sasl.qop=auth-conf",
     "defaultDatabase": "default",
     "jdbc": "hive2"
   }

2. Save the file.
3. In your CLI command, set the value of --conn_port = 10001.

4. Execute the command.

5. Test the Hive connection.

6. If it's not working, delete the connection and try again.

Configure for Hive over Zookeeper Quorum

Steps:

1. Login to Ambari.
2. In the left nav bar, select Hive. 
3. Copy the HiveServer2 JDBC URL to the clipboard.

4. Paste it into a text editor. It should look something like the following:
   
   

   jdbc:hive2://hdp26-w-1.c.example:2181,hdp26-w-3.c.example:2181,hdp26-w-2.c.example:2181/;serviceDiscoveryMode=zooKeeper;zooKeeperNamespace=hiveserver2

5. When you create the connection in  Designer Cloud Enterprise Edition:

   1. Host: Specify the first host value in the URL. In the above, it is this value:

      hdp26-w-1.c.example:2181,hdp26-w-3.c.example:2181,hdp26-w-2.c.example

   2. Port Number: In the above, it is this value:
      
      

      2181

   3. Connect String Options: In the above, it is this value:
      
      

      ;serviceDiscoveryMode=zooKeeper;zooKeeperNamespace=hiveserver2

6. Specify the other properties accordingly. 

Configure Hive connection for high availability

Minimum requirements:

• Multiple Hive servers and metastores are required.
• A minimum of three Zookeeper server is required.

Steps:

1. Login to Ambari.
2. In the left nav bar, select Hive. 
3. Copy the HiveServer2 JDBC URL to the clipboard.

4. Paste it into a text editor. Example:
   
   

   jdbc:hive2://thdp-m-1-20190226193250.c.t-dev:2181,thdp-w-2-20190226193418.c.t-dev:2181/;serviceDiscoveryMode=zooKeeper;zooKeeperNamespace=hiveserver2

5. When you create the connection in  Designer Cloud Enterprise Edition:

   1. Host: Specify the hosts listed in the JDBC URL, removing the protocol and port identifiers. From the above example, the value is the following:

      thdp-m-1-20190226193250.c.t-dev:2181,thdp-w-2-20190226193418.c.t-dev

   2. Port Number: From the example, it is this value:
      
      

      2181

   3. Connect String Options: From the example, you must prepend the remainder with the identifier of the principal, as in the following:
      
      

      ;principal=hive/_HOST@HORTONWORKS;serviceDiscoveryMode=zooKeeper;zooKeeperNamespace=hiveserver2

6. Specify the other properties accordingly. 
7. To test:
   1. Run a job sourced from the first Hive server.
   2. If possible, disable the first listed Hive server to test failover access.

Configure for Kerberos

For a Kerberos-enabled cluster, you must include the Kerberos principal value as part of the Hive connection string options.

Please complete the following steps to update the Kerberos principal value for Hive into your Hive connection.

Steps:

1. Retrieve the Kerberos principal value for your deployment.

2. Apply the Kerberos principal to your Hive connection:

   1. Create connection through CLI: Create or edit the params file for your connection to Hive. This file must include the following setting for connectStrOpts :

      {
        "connectStrOpts": ";principal=hive/<principal_value>",
        "defaultDatabase": "default",
        "jdbc": "hive2"
      }

      where:
      <principal_value> is the Kerberos principal (<host>@<realm>) for Hive on your cluster. 
      For more information, see CLI for Connections.

   2. Create connection through the application: Add the Hive principal in the above format to the Connect String Options in your Hive connection. See Create Connection Window.
3. Save the file.
4. Test the connection.

Run Hive jobs on a specific YARN queue

If needed, you can route any Spark jobs sourced from Hive to a specific YARN job queue. 

Steps:

1. In your Hive connection, add the following option to your Connection String Options (connectStrOpts) in your Hive connection:

     "connectStrOpts": ";sess_var_list?mapred.job.queue.name=<your_queue>",
   
   

   where:
   <your_queue> is the name of the YARN job queue.

2. Save the change.
3. Test the connection. 
4. Run a job, and verify that it is routed to the appropriate YARN job queue.