Skip to end of metadata
Go to start of metadata

This instruction can be applied both for single and multi-node deployment. It is based on the article: and described how-to install HDP 2.5 with Metron. 

Check it out if anything goes wrong or in troubleshooting section below. There is troubleshooting section in this article as well, make sure to check it first.

IMPORTANT: Some of the values specified in this article need to be substituted with your info, like IP addresses and hostnames. Such values are enclosed with brackers <like that>. Please make sure replace them with your info. 


  • Centos 6

  • In order to ease install make sure that your main interface is named eth0. If it is not, you need to adjust some Ambari services configuration accordingly (e.g. ElasticSearch)

  • Single-node: At least 48 GB RAM, 8 cores and 400 GB HDD. Multi-node: At least 32 GB RAM, 4 cores and 200 GB HDD for smooth performance.

  • (optional) Disable PackageKit if it is installed, if it is not, just ignore this point:

  • Increase limits for ElasticSearch and Storm on nodes where you will be installing them (if you don't know, increase it everywhere):

  • Disable IPv6, leaving it enabled may force service to bind to IPv6 addresses only and thus resulting in inability to connect to it (source link):

  • Disable Transparent Hugepage. Add "transparent_hugepage=never" to the end of the kernel line in grub.conf and reboot. (Ambari demands it, do we need to comply?):

    After reboot check that changes were applied (make sure that word "never" is selected in square-brackets):

Metron install pre-preparation

On all nodes Install pre-requisites for Ambari:

On main node where your Ambari will be located install following:



Install Maven on main node and on Metron node install java 1.8 (if you don't know what it is - install it everywhere):



Set path to Java 8 if it does not exist:

Save export for future reboots:

Download and install Maven:

On Ambari node install and enable docker (we will need it to build Metron mpack for Ambari):



Also on your build box, install npm (needed to build metron-config, part of the UI):


Build Metron code:

On main node clone Metron repository:



If you install Metron on single node (not multi-node as advised) you need to modify ElasticSearch config templates to use only configuration specified below. Config templates are located in incubator-metron/metron-deployment/packaging/ambari/metron-mpack/src/main/resources/common-services/ELASTICSEARCH/2.3.3/package/templates/

Fix Kibana install file (it should be fixed in METRON-641:

Build Metron with HDP 2.5 profile:



On all nodes create localrepo directory and copy RPMs from Ambari node there:



Use scp for remote nodes:



If passwordless ssh has not yet been set up within the cluster, then in main node generate key:



Add this key to all the slave nodes:



Ambari 2.4 with HDP 2.5 install

Inspired by:

Adjust limits to secure level (inspired by link):

Enable time sync, disable firewall and SElinux:



Make sure each node can resolve every other node's hostname or add hostname of each node to /etc/hosts on every node. For example add following lines in /etc/hosts of each node:

Where, and are the IPs of your nodes and node1, node2 and node3 are hostnames.

On main node download and setup Ambari repo (you may replace the "" with a newer Ambari version number):



Check that it was added:



Install and setup Ambari server:



Add Metron service to Ambari by running mpack command (make sure to specify correct path to mpack in --mpack=):



Start Ambari:



Access the Ambari UI by going to the following URL in a web browser (use admin / admin as user / pass):



Get Started page: Enter any desired cluster name.

Select Version: Make sure "Public Repository" is checked.

Install Options: Specify hostnames of your nodes where Ambari cluster should be installed (all the ones you have specified in /etc/hosts) in Target Hosts. Copy content of the main node private key (/root/.ssh/id_rsa) in "Host Registration Information". If you receive warning like below, ignore it and click OK:

Choose Services: Select following Services:


Metron related


YARN + MapReduce2









Ambari Metrics






Assign Masters: Assign "Kafka Broker" on all nodes. Make sure move following components on one common node:



Storm UI Server

Metron Indexing

MySQL Server

Kibana Server

Elasticsearch Master

Metron Parsers

Metron Enrichment

Assign Slaves and Clients: select All for:








Customize Services: Following are the list of service that need to be configured:



Set zen_discovery_ping_unicast_hosts to: <replace_with_elasticsearch_master_hostname> (to the IP of the node where you assigned ElasticSearch Master on the Assign Master tab)


Set kibana_es_url to: http://<replace_with_elasticsearch_master_hostname>:9200 (to the IP of the node where you assigned ElasticSearch Master on the Assign Master tab)


Set Elasticsearch Hosts to: <replace_with_elasticsearch_master_hostname> (to the IP of the node where you assigned ElasticSearch Master on the Assign Master tab)

Change global.json template from (unless it is already fixed as reported in METRON-642):

"es.ip": "{{ es_url }}",


"es.ip": "<replace_with_elasticsearch_master_hostname>",

"es.port": "9300", 


Set rest of the configuration values to recommended by Ambari or the one you desire (like DB passwords) and perform install.

After install configuration

Fix ElasticSearch permission (it will crash right after start in Ambari) (unless it is already fixed as reported in METRON-642):

As it will be owned by root by default and will drop error:

Likely root cause: java.nio.file.AccessDeniedException: /etc/elasticsearch/scripts

 # ls -la /etc/elasticsearch
-rwxr-x---.   1 root          elasticsearch  2571 May 12 09:24 logging.yml
drwxr-x---.   2 root          elasticsearch  4096 May 17 11:49 scripts

Fix path to ES log file in Java parameter (unless it is already fixed as reported in METRON-642)::

It is ok if some service will not able to start, check the errors and start them all manually.


Ignore the error Storm UI shown on the screenshot below if you've built your Metron code with HDP- profile (in Maven):

It appears because your Kafka Topic was not created or contains no data. Setup streaming and make sure your Kafka topic (from which topology should read data) exists.


If you have GUI installed on your server you should run following, before running git clone command:


Or you may receive an error:

(gnome-ssh-askpass:15028): Gtk-WARNING **: cannot open display:


If Ambari metrics is not coming up, use this:



And re-try.

If you receive an error:

Unsupported major.minor version 52.0

You may need to install Java 1.8 on the node you receive this from:





  • No labels
Adaptavist ThemeBuilder EngineAtlassian Confluence