@SAMSAL ,   Here's what I think is happening: Your user, who has id "168b019c-0180-1000-ffff-fffffbf36c3a" (from users.xml) only has access to the processor group with id "155cec02-0180-1000-6d4b-ac96d2372f41". For authorizations.xml:   <policy identifier="168b74d6-0180-1000-ffff-ffffd79ba94d" resource="/process-groups/155cec02-0180-1000-6d4b-ac96d2372f41" action="R"> <group identifier="1966f436-0180-1000-ffff-ffffd1d17786"/> <user identifier="168b019c-0180-1000-ffff-fffffbf36c3a"/> </policy> <policy identifier="168bae4a-0180-1000-ffff-ffff98c1495b" resource="/process-groups/155cec02-0180-1000-6d4b-ac96d2372f41" action="W"> <group identifier="1966f436-0180-1000-ffff-ffffd1d17786"/> <user identifier="168b019c-0180-1000-ffff-fffffbf36c3a"/> </policy>   Your PUT command is referencing a processor with id " 385fcdc0-0180-1000-0000-000030a768e3 ". I don't know how your canvas is organized, but my guess is that this processor does not belong inside the processor group "155cec02-0180-1000-6d4b-ac96d2372f41" and because of that the user is being denied access (403 Forbidden). To solve that you can login to the UI using an admin user, right-click on the Process Group that contains the processor that you're trying to manipulate and click on "Manage access policies".   In the Access Policies page, add your user to the "view the component" and " modify the component" policies.   After that, try again.   Cheers, André   ... View more

Could you please also send me your authorizations.xml and users.xml files? What's the user you're using for authentication in Postman? ... View more

Could you please share your authorizers.xml file? ... View more

@rafy ,   This is tricky and whatever solution we come up with here cannot be guaranteed to always work. It will always depend on the content that comes in the responseMessage field.   For the particular example that you shared above, this works: The settings are:  Search Value: (?s)(.*\"responseMessage\"\s*:\s*\"[^\"]*|\G[^\"]*)\"(?!,) Replacement Value: $1\\" Evaluation Mode: Entire text   You can check it out here: https://regex101.com/r/paPPhK/1   Cheers, André   ... View more

@SAMSAL ,   Have you enabled Ranger for authorization or are you managing policies in the NiFi UI? You are probably authenticated correctly, but your user may be lacking the necessary permissions to perform the API call.   André   ... View more

@rafy    The extra character in the response message is not a special character. It's just some extra double-quotes. However, when double-quotes appear in a string in JSON they must be escaped. The correct valid JSON would've been: { "responseMessage": "hdhdhdhdh:dgdgdgdg \"fdfdf\" bbbbbbb", "result": "failed", "code": "34" }   The application that's generating those messages should be fixed to generate valid JSON representations.   Cheers André ... View more

@SAMSAL ,   If your NiFi cluster was secured only with TLS (no Kerberos and/or LDAP external providers for authentication), you must have generate a client TLS certificate that you can use to authenticate with NiFi and register that certificate in your browser before you can make any calls to it.   If you have an external authentication provider configured, you can make a call to POST /nifi-api/access/token, passing username and password as form parameters to perform the authentication. If you're using Postman, this call will save the returned token in a cookie and you'll be able to perform the next calls as usual.   Otherwise, is you're using an external script, you can get the returned token and pass that as a bearer token for the subsequent calls. For example: token=$(curl \ -X POST \ -H 'Content-Type: application/x-www-form-urlencoded') \ -d 'username=admin&password=supersecret1' \ "https://nifi.example.com:8443/nifi-api/access/token" curl \ -X GET \ -H "Authorization: Bearer $token" \ "https://nifi.example.com:8443/nifi-api/processors/d95f5430-0180-1000-ffff-ffff96c5d76f"   Cheers, André   ... View more

@VinayKumar ,   In the site where you downloaded the parcel, there's also a ".sha1" file that you need to download and save in the same directory where you saved the parcel, with the same permissions (444) and ownership (cloudera-scm:cloudera-scm).   IMPORTANT: The "*.sha1" file, however, must be renamed to "*.sha" for it to be recognized.   Cheers, André   ... View more

@shrikantbm ,   How old is the oldest log segment on those partitions? What's the default log retention set for your cluster? Have you set any retention for the __consumer_offsets topic specifically?   Cheers, André ... View more

@kotopes ,   The API endpoint that you're looking for is the same you use to reconfigure pool parameters, but using a GET method instead of PUT: GET /cmf/clusters/cluster-name/queue-manager-api/api/v1/environments/dev/clusters/cluster-name/resources/scheduler/partitions/default/queues/root.pool_name   Cheers, André   ... View more

@JimAtWork ,   The endpoint you're looking for is /api/v1/projects/{user}/{project_name}/files/{filename}.   For example, you can upload a file to a project with the following curl command: curl \ -u myuser:mypwd \ -X PUT \ "http://cdsw.example.com/api/v1/projects/myuser/myproject/files/myfile.txt" \ -F "files[]=@myfile.txt"   Cheers, André   ... View more

@loridigia ,   The best way to avoid this problem is to configure and use Knox Gateway to access those services. Knox will handle the authentication and will ensure you can use those services without requiring any specific browser configuration.   Cheers, André   ... View more

@TrinoHelp ,   Double-quotes in SQL are used to specify column names. Try using single-quotes instead.   Cheers, André   ... View more

@robnew ,   It would be easier if you could provide an example of what you're trying to explain.   Cheers, André   ... View more

@roshanbi    Have you tried specifying the krav path as shown below instead?   keyTab="D:/services.kerberos.keytab"   Please use a forward slash instead of a backslash.   Cheers Andre   ... View more

I got that. What I want to know is what you expect to have in the incoming flowfile and how the processor will use this value. ... View more

@saif0014 ,   What to you want to filter by?   ANdré ... View more

@Chhavi ,   Could you explain what you want to achieve?   Cheers, André   ... View more

@lebron ,   Use the JsonTreeReader instead.   Cheers, André   ... View more