All Apps and Add-ons

Splunk UBA Impala Server not reachable

herguzav
Explorer

Hi

 

I'm installing Splunk UBA and I got the next error:

 

waiting on impala containerized service to come up
Running CaspidaCleanup, resetting rules
Cleaning up node domain.com
checking if zookeeper is reachable at: domain.com:2181
zookeeper reachable at: domain.com:2181
checking if postgres is reachable at: domain.com:5432
postgres server reachable at: domain.com:5432
checking if impala is reachable at: jdbc:impala://domain.com:21050/;auth=noSasl
impala jdbc server at:jdbc:impala://domain.com:21050/;auth=noSasl not reachable, aborting
required services not up, aborting cleanup
CaspidaCleanup failed, exiting

 

There are not logs from impala
[caspida@ubasplunk ~]$ ls /var/log/impala/
[caspida@ubasplunk ~]$ ls /var/log/impala/

 

 

The docker container is running ant the port is map and the 21050 port is open


[caspida@ubasplunk ~]$ sudo docker ps
CONTAINER ID IMAGE COMMAND CREATED STATUS PORTS NAMES
7d198d890b13 domain.com:5000/impala:latest "/bin/bash -c './imp…" 4 minutes ago Up 4 minutes 0.0.0.0:21000->21000/tcp, :::21000->21000/tcp, 0.0.0.0:21050->21050/tcp, :::21050->21050/tcp, 0.0.0.0:24000->24000/tcp, :::24000->24000/tcp, 0.0.0.0:25000->25000/tcp, :::25000->25000/tcp, 0.0.0.0:25010->25010/tcp, :::25010->25010/tcp, 0.0.0.0:25020->25020/tcp, :::25020->25020/tcp, 0.0.0.0:26000->26000/tcp, :::26000->26000/tcp impala
15d899b79ed2 07655ddf2eeb "/dashboard --insecu…" 6 minutes ago Up 6 minutes

 

 

Can you helpe to resolve the issue?

Labels (2)
Tags (3)
0 Karma
Get Updates on the Splunk Community!

Announcing the Expansion of the Splunk Academic Alliance Program

The Splunk Community is more than just an online forum — it’s a network of passionate users, administrators, ...

Learn Splunk Insider Insights, Do More With Gen AI, & Find 20+ New Use Cases You Can ...

Splunk Lantern is a Splunk customer success center that provides advice from Splunk experts on valuable data ...

Buttercup Games: Further Dashboarding Techniques (Part 7)

This series of blogs assumes you have already completed the Splunk Enterprise Search Tutorial as it uses the ...