000030358 - Unable to cancel a running HIVE job for a Warehouse Report in RSA Security Analytics

Document created by RSA Customer Support Employee on Jun 14, 2016Last modified by RSA Customer Support on Aug 21, 2019
Version 4Show Document
  • View in full screen mode

Article Content

Article Number000030358
Applies ToRSA Product Set: Security Analytics
RSA Product/Service Type: Security Analytics UI, Reporting Engine, Security Analytics Warehouse (SAW)
RSA Version/Condition: 10.3.x, 10.4.x
Platform: CentOS
IssueDue to limitations in the Hive JDBC interface, Warehouse reports will continue to run on the Warehouse even after a user cancels from the Reporting Engine module in the RSA Security Analytics UI.
WorkaroundIn order to cancel the job, the job must be killed manually following the steps below based on the type of warehouse.

MapR Warehouse
  1. Get the Jobid from the job logs, as shown in the example below.

    14/08/22 13:11:05 INFO mapred.JobClient: Running job: job_201408220629_0004

  2. Login to the jobtracker UI by navigating to http://<jobtracker-host>:50030/jobtracker.jsp and search for the Jobid to kill under Running Jobs.
    User-added image
  3. Kill the Jobid with one of the options below.
    • Select the Jobid under Running Jobs and click on the Kill Selected Jobs button.
    • Click on the Jobid link, scroll down, and click on the Kill this job link.
        User-added image

Pivotal HD Warehouse

  1. Get the Jobid from the job logs, as shown in the example below.

    2014-08-25 06:53:21.556 : 14/08/25 06:53:21 INFO mapreduce.JobSubmitter: Submitting tokens for job: job_1406294496331_0385
    2014-08-25 06:53:25.589 : 14/08/25 06:53:25 INFO impl.YarnClientImpl: Submitted application application_1406294496331_0385 to ResourceManager at <pivotal-host>/<ip_address>:8032
    2014-08-25 06:53:26.085 : 14/08/25 06:53:26 INFO mapreduce.Job: The url to track the job: http://<pivotal-host>:8088/proxy/application_1406294496331_0385/
    2014-08-25 06:53:26.087 : 14/08/25 06:53:26 INFO mapreduce.Job: Running job: job_1406294496331_0385
    2014-08-25 06:53:33.084 : 14/08/25 06:53:33 INFO mapreduce.Job: Job job_1406294496331_0385 running in uber mode : false

  2. Kill the Jobid from the console using one of the options below.
    • Use the following mapred commands:

      mapred job -list
      mapred job -kill <jobid>

    • Use the following yarn commands:

      yarn application -list
      yarn application -kill <applicationid>


If you are unsure of any of the steps above or experience any issues, contact RSA Support and quote this article number for further assistance.