Splunk Search

Hunk Cloudera 5.7 Not seeing MapReduce jobs in YARN Resource Manager

vavkkishore_usa
New Member

Dear All,

I installed Cloudera Quickstart VM 5.7 and installed Hunk by downloading splunk-6.4.2-00f5bb3fa822-Linux-x86_64.tar

Then created a virtual index -

Downloaded from Hunk website sample data file "Hunkdata.json.gz" - copied it in HDFS at this location /data/Hunkdata.json.gz

Did searches "index=ponyindex"

I see the output

My question:
I don't see any MapReduce programs running in YARN resource manager.

Where are MapReduce jobs running on Hadoop cluster - I should see an application_id in YARN Resource Manager but I don't see

Please help me where to look for YARN application jobs.

Thanks,
alt text

Tags (3)
0 Karma
1 Solution

rdagan_splunk
Splunk Employee
Splunk Employee

To run a MapReduce you will need to run this combo:
index=XYZ | stats count (or any Splunk reporting command) + be in Smart mode
Your
index=XYZ by itself will not generate a MapReduce job. Also if you are in Verbose mode you will not generate MapReduce jobs

View solution in original post

rdagan_splunk
Splunk Employee
Splunk Employee

To run a MapReduce you will need to run this combo:
index=XYZ | stats count (or any Splunk reporting command) + be in Smart mode
Your
index=XYZ by itself will not generate a MapReduce job. Also if you are in Verbose mode you will not generate MapReduce jobs

vavkkishore_usa
New Member

Thanks rdagan for your response

0 Karma

ddrillic
Ultra Champion

I always start by going to -

Inspect

And then to -

search log

Please look for the first error in the search.log file.

0 Karma

vavkkishore_usa
New Member

Hi ddrillic ,
Thanks for your reply.

Yes I analyzed the search.log file and there is no error. I am able to see the results successfully.

I see the log files "stream" and in stackoverflow read Hunk will do MapReduce streaming.

I got a doubt is Hunk using Local MapReduce and not running the MR through YARN. To clarify this I raised this question and looking forward to help me why I am not seeing YARN application id or MapReduce job on the cluster though results are shown in the Splunk UI.

Thanks,

0 Karma
Get Updates on the Splunk Community!

Webinar Recap | Revolutionizing IT Operations: The Transformative Power of AI and ML ...

The Transformative Power of AI and ML in Enhancing Observability   In the realm of IT operations, the ...

.conf24 | Registration Open!

Hello, hello! I come bearing good news: Registration for .conf24 is now open!   conf is Splunk’s rad annual ...

ICYMI - Check out the latest releases of Splunk Edge Processor

Splunk is pleased to announce the latest enhancements to Splunk Edge Processor.  HEC Receiver authorization ...