Analytics/Systems/Cluster/Access

Command line access

You can access the Hadoop and Hive on most of the Analytics Clients. For information on getting access, see Analytics/Data access.

HTTP access

Access to HTTP GUIs in the Analytics Cluster is currently very restricted. You must have shell accounts on analytics nodes.

SSH tunnel

For the main article on creating a tunnel, see Proxy access to cluster

If you are in the wmf LDAP group (open to every WMF employee/contractor) and you care only about the Yarn Resource Manager UI, you can login directly to yarn.wikimedia.org.

Otherwise if you need to contact specific UIs or services within the cluster (so with internal IPs), see Proxy access to cluster.

Kerberos

Sadly DataGrip seems not working with Hadoop and Kerberos, see T241170.

DataGrip

Figure 1: Hive driver settings in DataGrip

Figure 2: Hive connection details in DataGrip

JetBrains provides a license to the Foundation which can be used to install the professional versions of IntelliJ IDEA and PyCharm IDEs. For more information refer to this page on Office wiki. (Contractors need to get in touch with a full-time staffer for those details.) One of the IDEs available through this license is DataGrip, which can connect to MariaDB and Hive and many others. Once you have downloaded and installed DataGrip, follow these instructions to connect to Hive:

1. Download a copy of the JDBC driver from the cluster: scp stat1007.eqiad.wmnet:/usr/lib/hive/lib/hive-jdbc-1.1.0-cdh5.16.1-standalone.jar ~/Downloads/
2. Open an SSH tunnel to ssh -N stat1007.eqiad.wmnet -L 10000:analytics-hive.eqiad.wmnet:10000 in Terminal
3. In DataGrip, File > New > Data Source > Apache Hive to open the "Data Sources and Drivers" window.
4. In the Drivers section of this window, go to Apache Hive and click + under "Driver files", then "Custom JARs…", and select the JAR file you just downloaded from stat1007. Note: if you have previously downloaded a JetBrains-provided Hive driver, you will need to remove it (-) to ensure DataGrip uses the correct driver. Refer to Fig. 1 for confirmation.
5. In the Project Data Sources section of this window, where a new Hive data source has been created called @localhost, specify a name – e.g. "Hive (via SSH tunnel)" – and the following in the General tab:
   • Host and Port: leave as is (localhost and 10000)
   • User: your shell username
   • Schema: default
   • URL: will be automatically filled and should look like jdbc:hive2://localhost:10000/default
6. Click TEST CONNECTION to check that it works. If it asks you for password, leave that field empty and click OK to proceed. Refer to Fig. 2 for confirmation.
7. In the same window, go to the Schemas section. DataGrip will then connect to Hive and fetch the list of databases (schemas). Once the list has been populated you can select the ones you want to see in DataGrip (e.g. wmf, event, event_sanitized) and click OK to be done.

You can now use DataGrip as a local alternative to Hue. You will need to open an SSH tunnel to an-coord1001 (like you did in step 2) every time you want to connect with DataGrip. Yes, there is an SSH/SSL tab in the connection details window but it doesn't support our Bastion setup. Adding the following to your ~/.bash_profile will make that part easy because then you can just type data-grip to open the tunnel:

alias data-grip="ssh -N stat7 -L 10000:analytics-hive.eqiad.wmnet:10000"