Hi
I'm installing Splunk UBA and I got the next error:
waiting on impala containerized service to come up
Running CaspidaCleanup, resetting rules
Cleaning up node domain.com
checking if zookeeper is reachable at: domain.com:2181
zookeeper reachable at: domain.com:2181
checking if postgres is reachable at: domain.com:5432
postgres server reachable at: domain.com:5432
checking if impala is reachable at: jdbc:impala://domain.com:21050/;auth=noSasl
impala jdbc server at:jdbc:impala://domain.com:21050/;auth=noSasl not reachable, aborting
required services not up, aborting cleanup
CaspidaCleanup failed, exiting
There are not logs from impala
[caspida@ubasplunk ~]$ ls /var/log/impala/
[caspida@ubasplunk ~]$ ls /var/log/impala/
The docker container is running ant the port is map and the 21050 port is open
[caspida@ubasplunk ~]$ sudo docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
7d198d890b13 domain.com:5000/impala:latest "/bin/bash -c './imp…" 4 minutes ago Up 4 minutes 0.0.0.0:21000->21000/tcp, :::21000->21000/tcp, 0.0.0.0:21050->21050/tcp, :::21050->21050/tcp, 0.0.0.0:24000->24000/tcp, :::24000->24000/tcp, 0.0.0.0:25000->25000/tcp, :::25000->25000/tcp, 0.0.0.0:25010->25010/tcp, :::25010->25010/tcp, 0.0.0.0:25020->25020/tcp, :::25020->25020/tcp, 0.0.0.0:26000->26000/tcp, :::26000->26000/tcp impala
15d899b79ed2 07655ddf2eeb "/dashboard --insecu…" 6 minutes ago Up 6 minutes
Can you helpe to resolve the issue?
