All Apps and Add-ons

Splunk UBA Impala Server not reachable

herguzav
Explorer

Hi

 

I'm installing Splunk UBA and I got the next error:

 

waiting on impala containerized service to come up
Running CaspidaCleanup, resetting rules
Cleaning up node domain.com
checking if zookeeper is reachable at: domain.com:2181
zookeeper reachable at: domain.com:2181
checking if postgres is reachable at: domain.com:5432
postgres server reachable at: domain.com:5432
checking if impala is reachable at: jdbc:impala://domain.com:21050/;auth=noSasl
impala jdbc server at:jdbc:impala://domain.com:21050/;auth=noSasl not reachable, aborting
required services not up, aborting cleanup
CaspidaCleanup failed, exiting

 

There are not logs from impala
[caspida@ubasplunk ~]$ ls /var/log/impala/
[caspida@ubasplunk ~]$ ls /var/log/impala/

 

 

The docker container is running ant the port is map and the 21050 port is open


[caspida@ubasplunk ~]$ sudo docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
7d198d890b13 domain.com:5000/impala:latest "/bin/bash -c './imp…" 4 minutes ago Up 4 minutes 0.0.0.0:21000->21000/tcp, :::21000->21000/tcp, 0.0.0.0:21050->21050/tcp, :::21050->21050/tcp, 0.0.0.0:24000->24000/tcp, :::24000->24000/tcp, 0.0.0.0:25000->25000/tcp, :::25000->25000/tcp, 0.0.0.0:25010->25010/tcp, :::25010->25010/tcp, 0.0.0.0:25020->25020/tcp, :::25020->25020/tcp, 0.0.0.0:26000->26000/tcp, :::26000->26000/tcp impala
15d899b79ed2 07655ddf2eeb "/dashboard --insecu…" 6 minutes ago Up 6 minutes

 

 

Can you helpe to resolve the issue?

Labels (2)
Tags (3)
0 Karma
Get Updates on the Splunk Community!

SOC Modernization: How Automation and Splunk SOAR are Shaping the Next-Gen Security ...

Security automation is no longer a luxury but a necessity. Join us to learn how Splunk ES and SOAR empower ...

Ask It, Fix It: Faster Investigations with AI Assistant in Observability Cloud

  Join us in this Tech Talk and learn about the recently launched AI Assistant in Observability Cloud. With ...

Index This | How many sides does a circle have?

  March 2025 Edition Hayyy Splunk Education Enthusiasts and the Eternally Curious!  We’re back with this ...