In namenode host; current file /var/log/hadoop/$HDFS_USER/hdfs-audit.log. history file with timestamp. you will find 'cmd=mkdirs'... in the log. ... View more

Please check  ambari data : select * from execution_command where task_id=13296\G; select * from host_role_command where task_id=13296\G; get the 'role' column value select * from stage where request_id=13296;  maybe you will find some clues～ ... View more