This section describes the basics of creating a Hive connection and modifying it for specific aspects of your Hadoop environment.

For more information on supported versions of Hive, see Configure for Hive.

Limitations

NOTE: The platform supports a single, global connection to Hive. All users must use this connection.

For more information on how the platform works with Hive, see Using Hive.

Create Encryption Key File

Before you create your Hive connection, you must create and reference an encryption key file. If you have not created one already, see Create Encryption Key File.

Create Hive Connection

You can create the connection through the application, the command line interface, or the APIs.

NOTE: The following configuration methods apply to creation of an insecure connection to a Hive 1.x instance. If you are applying security, using HTTP, or connecting to Hive 2.x, additional configuration is required. Before creating these connections, please review the Additional Configuration Options section below.

Create through application

A  can create the Hive connection through the application.

Steps:

  1. Login to the application.
  2. In the menu, select Settings menu > Settings > Connections.
  3. In the Create Connection page, click the Hive connection card.

  4. Specify the properties for your Hive database. 

    1. Before you create the connection, you should review the rest of this section to verify that you are using the proper connection string options for the Hive connection to work in your environment. 

      NOTE: If secure impersonation is enabled on your cluster, you must include the Hive principal as part of your connection string. For more information, see Configure for Hive.


    2. For more information, see Create Connection Window.

  5. Click Save. 

Create through CLI

This connection can also be created through the . Notes on creating the connection:

The CLI tools are stored in the following directory:

/opt/trifacta/bin/

Example command (all one command):

./trifacta_cli.py create_connection --user_name <trifacta_admin_username> --password <trifacta_admin_password> 
--conn_type hadoop_hive --conn_name aHiveConnection 
--conn_description "This is my Hive connection." 
--conn_host example.com --conn_port 10000 
--conn_credential_type trifacta_service --conn_params_location ~/.trifacta/p.json 
--conn_is_global --cli_output_path ./conn_create.out
ParameterDescription
create_connectionCLI action type. Please leave this value as create_connection.
--user_name

Username of the account to use. Please specify the full username.

 For this connection type, it must be an admin user account.

--passwordPassword of the account.
--conn_typeThe type of connection. Set this value to hadoop_hive.
--conn_name

The internal name of this connection.

NOTE: This value must be unique within all of your connections.

--conn_descriptionA user-friendly description for this connection appears in the application.
--conn_hostHost of the Hive instance.
--conn_port

Port number of the Hive instance.

TCP connection: 10000

HTTP connection: 10001

NOTE: Additional configuration is required for enabling an HTTP or HTTPS connection. See Configure Use of HTTP below.

--conn_credential_typeThe type of credentials to use. Set this value to trifacta_service for Hive.
--conn_credential_location

For type of credentials, a credential file is not used.

--conn_params_locationPath to the file containing the parameters to pass to Hive during interactions. See below.
--conn_ is_global

This flag is required. It makes the connection available to all . This flag requires no value.

NOTE: After a connection has been made global, it cannot be made private. You must delete the connection through the CLI and then recreate it.

You cannot delete a connection if it has imported datasets associated with it. You can delete a connection without datasets, but the publication information associated with the connection is dropped.

--conn_skip_test

By default, any connection is tested as part of a create or edit action. Include this flag to skip testing the connection. This flag requires no value.

Tip: After creation, you can test the connection and modify it through the application. See Flows Page.

--cli_output_path

The path to the file where results of this command are written.

NOTE: The user issuing the command must also have execute permissions on all parent folders in the specified cli_output_path.

Example Params file:

A parameter file containing the following information must be accessible within the . Please add a reference to this file in your command.

Some deployment scenarios require that specific values be passed into the ConnectStrOpts parameter for the connection to work. Please be sure to read the optional configuration sections below.

Example:

{
  "defaultDatabase":"default",
  "jdbc": "hive2"
}

For more information on the , see CLI for Connections.

Create via API

For more information, see API Connections Create v3.

Additional Configuration Options

Configure for HTTP

By default, the  utilizes TCP to connect to Hive. As needed, the platform can be configured to interact with HiveServer2 over HTTP. 

NOTE: HTTP connections are enabled by inserting additional parameters as part of the connection string. In some environments, the JDBC drive may automatically insert these parameters, based on configuration in hive-site.xml. If these parameters are not inserted, the does not need additional configuration. For more information, see https://cwiki.apache.org/confluence/display/Hive/HiveServer2+Clients#HiveServer2Clients-ConnectionURLWhenHiveServer2IsRunninginHTTPMode.

NOTE: If you are planning to use SSL, additional configuration is required. See below.

 

Steps:

To enable the  to use HTTP when connecting to Hive, please do the following.

  1. Create a params file for your Hive connection. This file must contain at least the following entry:

        "connectStrOpts": ";transportMode=http;httpPath=cliservice"
  2. Save the file. 
  3. In your CLI command, set the value of --conn_port = 10001.

  4. Execute the command.

  5. Test the Hive connection.

  6. If it's not working, delete the connection and try again.

Configure for SASL

NOTE: Cloudera supports an additional method for communicating over SSL with Hive. For more information on how to identify the method used by your Cloudera cluster, see Configure for Cloudera.

The steps below describe how to enable the SASL-QOP method of SASL (Simple Authentication and Security Layer) communications. To enable, you must add an additional connection string parameter.

Steps:

  1. Create or edit the params file for your connection to Hive. This file must include the following setting for connectStrOpts:

    {
  "connectStrOpts": ";sasl.qop=auth-conf",
  "defaultDatabase": "default",
  "jdbc": "hive2"
}
  2. Save the file.
  3. In your CLI command, set the value of --conn_port = 10001.

  4. Execute the command.

  5. Test the Hive connection.

  6. If it's not working, delete the connection and try again.

Configure for Hive over Zookeeper Quorum

NOTE: Hive 2.x connections using Zookeeper Quorum are supported on HDP 2.6 only.


Steps:

  1. Login to Ambari.
  2. In the left nav bar, select Hive. 
  3. Copy the HiveServer2 Interactive JDBC URL to the clipboard.

  4. Paste it into a text editor. It should look something like the following:

    jdbc:hive2://hdp26-w-1.c.example:2181,hdp26-w-3.c.example:2181,hdp26-w-2.c.example:2181/;serviceDiscoveryMode=zooKeeper;zooKeeperNamespace=hiveserver2-hive2
  5. When you create the connection in :

    1. Host: Specify the first host value in the URL. In the above, it is this value:

      hdp26-w-1.c.example:2181,hdp26-w-3.c.example:2181,hdp26-w-2.c.example

    2. Port Number: In the above, it is this value:

      2181

    3. Connect String Options: In the above, it is this value:

      ;serviceDiscoveryMode=zooKeeper;zooKeeperNamespace=hiveserver2-hive2
  6. Specify the other properties accordingly. 

Configure for Kerberos

For a Kerberos-enabled cluster, you must include the Kerberos principal value as part of the Hive connection string options.

Please complete the following steps to update the Kerberos principal value for Hive into your Hive connection.

Steps:

  1. Retrieve the Kerberos principal value for your deployment.

  2. Apply the Kerberos principal to your Hive connection:

    1. Create connection through CLI: Create or edit the params file for your connection to Hive. This file must include the following setting for connectStrOpts :

      {
  "connectStrOpts": ";principal=hive/<principal_value>",
  "defaultDatabase": "default",
  "jdbc": "hive2"
}

      where:
      <principal_value> is the Kerberos principal (<host>@<realm>) for Hive on your cluster. 
      For more information, see CLI for Connections.

    2. Create connection through the application: Add the Hive principal in the above format to the Connect String Options in your Hive connection. See Create Connection Window.
  3. Save the file.
  4. Test the connection.

Run Hive jobs on a specific YARN queue

If needed, you can route any Hadoop jobs sourced from Hive to a specific YARN job queue. 

Steps:

  1. In your Hive connection, add the following option to your Connection String Options (connectStrOpts) in your Hive connection:

      "connectStrOpts": ";sess_var_list?mapred.job.queue.name=<your_queue>",

    where:
    <your_queue> is the name of the YARN job queue.

  2. Save the change.
  3. Test the connection. 
  4. Run a job, and verify that it is routed to the appropriate YARN job queue.