Thanks @Benoit Rousseau I followed your steps and restarted NiFi service. NiFi Service is getting failed with below error: ERROR [NiFi logging handler] org.apache.nifi.StdErr Error: Could not find or load main class "-javaagent:.root.software.jmx_prometheus_javaagent-0.3.1.jar=7071:.root.software.nifi.yml" ... View more

I have updated "Advanced nifi-bootstrap-env" config on Ambari as below and restarted NIFI service. But still I don't see any metrics coming up on http://nifi1:7071/metrics Am I missing anything ? ... View more

@Alvin Jin @Benoit Rousseau I am trying to monitor NIFI using JMX. Can you please provide steps to enable JMX for HDF Ambari based Nifi cluster? Thanks ... View more

@Santhosh B Gowda I am trying to monitor NIFI using JMX. Do you know how to enable JMX for HDF Ambari based Nifi cluster? Thanks ... View more

Thank you @Matt Clarke I tried but am not able to merge the truststore files using keytool. Can you please explain how to add a new entry in existing truststore file. Also You mentioned, The NiFi CA is not to be used in production environment. Is there any specific reason? Can you please suggest which option would be recommended to secure NIFI. Thanks. ... View more

Thank you @Matt Clarke So I just need to merge trustedCertEntries in truststore and keep everything else as it is like below. nifi1: Entry type: trustedCertEntry Owner: CN=hdfnifidev04.medassurant.local, OU=NIFI Issuer: CN=rsdevhdf3.medassurant.local, OU=NIFI nifi2: Entry type: trustedCertEntry Owner: CN=rsdevhdf3.medassurant.local, OU=NIFI Issuer: CN=hdfnifidev04.medassurant.local, OU=NIFI Then I need to copy this truststore file in nifi-toolkit/bin folder on both the nifi clusters. Then I need to restart the nifi services on both the clusters with NiFi CA Force Regenerate? as true. Please let me know if I am missing any step. Do i need to do anything with nifi-cert.pem files between the two nifi clusters. Thank You. ... View more

@Matt Clarke Thank you so much for your response. I have attached verbose output of keystore and truststore for both the nifi instances. Thank You. ... View more

@Matt Clarke I am getting below error on Remote Process Group when i try to setup Site to Site between 2 secured NIFI instances. keystore.jks and truststore.jks files are available in each node of the cluster. But still error is saying that unable to find valid certification path to requested target. Could you please point me in the right direction? 2018-05-21 10:00:15,229 WARN [Remote Process Group 7484c56b-0163-1000-ffff-ffff89fed68c: https://hdfnifidev02.medassurant.local:9091/nifi/,https://hdfnifidev03.medassurant.local:9091/nifi/,https://hdfnifidev04.medassurant.local:9091/nifi/ Thread-1] o.a.n.r.util.SiteToSiteRestApiClient Failed to get controller from https://hdfnifidev02.medassurant.local:9091/nifi-api due to javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 2018-05-21 10:00:15,257 WARN [Remote Process Group 7484c56b-0163-1000-ffff-ffff89fed68c: https://hdfnifidev02.medassurant.local:9091/nifi/,https://hdfnifidev03.medassurant.local:9091/nifi/,https://hdfnifidev04.medassurant.local:9091/nifi/ Thread-1] o.a.n.r.util.SiteToSiteRestApiClient Failed to get controller from https://hdfnifidev03.medassurant.local:9091/nifi-api due to javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 2018-05-21 10:00:15,287 WARN [Remote Process Group 7484c56b-0163-1000-ffff-ffff89fed68c: https://hdfnifidev02.medassurant.local:9091/nifi/,https://hdfnifidev03.medassurant.local:9091/nifi/,https://hdfnifidev04.medassurant.local:9091/nifi/ Thread-1] o.a.n.r.util.SiteToSiteRestApiClient Failed to get controller from https://hdfnifidev04.medassurant.local:9091/nifi-api due to javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 2018-05-21 10:00:15,287 WARN [Remote Process Group 7484c56b-0163-1000-ffff-ffff89fed68c: https://hdfnifidev02.medassurant.local:9091/nifi/,https://hdfnifidev03.medassurant.local:9091/nifi/,https://hdfnifidev04.medassurant.local:9091/nifi/ Thread-1] o.a.n.remote.StandardRemoteProcessGroup Unable to connect to RemoteProcessGroup[https://hdfnifidev02.medassurant.local:9091/nifi/,https://hdfnifidev03.medassurant.local:9091/nifi/,https://hdfnifidev04.medassurant.local:9091/nifi/] due to java.io.IOException: Tried all cluster URLs but none of those was accessible. Last Exception was javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 2018-05-21 10:00:19,862 WARN [Timer-Driven Process Thread-4] o.a.n.r.util.SiteToSiteRestApiClient Failed to get controller from https://hdfnifidev02.medassurant.local:9091/nifi-api due to javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 2018-05-21 10:00:19,889 WARN [Timer-Driven Process Thread-4] o.a.n.r.util.SiteToSiteRestApiClient Failed to get controller from https://hdfnifidev03.medassurant.local:9091/nifi-api due to javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 2018-05-21 10:00:19,918 WARN [Timer-Driven Process Thread-4] o.a.n.r.util.SiteToSiteRestApiClient Failed to get controller from https://hdfnifidev04.medassurant.local:9091/nifi-api due to javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 2018-05-21 10:00:19,919 WARN [Timer-Driven Process Thread-4] o.apache.nifi.controller.FlowController Unable to communicate with remote instance RemoteProcessGroup[https://hdfnifidev02.medassurant.local:9091/nifi/,https://hdfnifidev03.medassurant.local:9091/nifi/,https://hdfnifidev04.medassurant.local:9091/nifi/] due to org.apache.nifi.controller.exception.CommunicationsException: Unable to communicate with Remote NiFi at URI https://hdfnifidev02.medassurant.local:9091/nifi/,https://hdfnifidev03.medassurant.local:9091/nifi/,https://hdfnifidev04.medassurant.local:9091/nifi/ due to: Tried all cluster URLs but none of those was accessible. Last Exception was javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target 2018-05-21 10:00:20,053 INFO [Clustering Tasks Thread-1] o.a.n.c.c.ClusterProtocolHeartbeater Heartbeat created at 2018-05-21 10:00:19,912 and sent to rsdevhdf2.medassurant.local:9088 at 2018-05-21 10:00:20,053; send took 141 millis ... View more