Configure JMX for Ranger Service

You can add the configuration parameters in Ambari to enable JMX monitoring for Ranger components.

Steps to Configure JMX

In the ODP Ambari UI, navigate to Ranger > Configs > Advanced.
In the ranger-env template section, locate configurations for:
- ranger_admin
- ranger_usersync
- ranger_tagsync (if deployed)
Add the following configuration to the template to enable JMX for Ranger.

Update the service configuration template with the appropriate JMX settings. Provide valid values for all placeholders (< >) for each Ranger component.

Configure JMX Without Security

Bash
    
 
export JAVA_OPTS="${JAVA_OPTS} -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=false -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.port=<Ranger JMX Port>"
Copy

JMX with Basic Authentication

Bash
    
 
export JAVA_OPTS="${JAVA_OPTS} -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=true -Dcom.sun.management.jmxremote.ssl=false -Dcom.sun.management.jmxremote.access.file=</path/to/jmxremote.access/file> -Dcom.sun.management.jmxremote.password.file=</path/to/jmxremote.password/file> -Dcom.sun.management.jmxremote.port=<Ranger JMX Port>"
Copy

JMX with Basic Authentication and SSL

Bash
    
 
export JAVA_OPTS="${JAVA_OPTS} -Dcom.sun.management.jmxremote -Dcom.sun.management.jmxremote.authenticate=true -Dcom.sun.management.jmxremote.ssl=true -Dcom.sun.management.jmxremote.registry.ssl=true -Djavax.net.ssl.keyStore=</path/to/keystore.jks/file> -Dcom.sun.management.jmxremote.access.file=</path/to/jmxremote.access/file> -Djavax.net.ssl.keyStorePassword=<Keystore Password> -Dcom.sun.management.jmxremote.password.file=</path/to/jmxremote.password/file> -Djavax.net.ssl.trustStore=</path/to/truststore.jks/file> -Djavax.net.ssl.trustStorePassword=<Truststore Password> -Dcom.sun.management.jmxremote.port=<Ranger JMX Port>"
Copy

Save the configurations.
Restart the Ranger service.

Last updated on

Was this page helpful?