Steps to prepare and connect to Hive

Lightup account setup

First, create/grant a database user with SELECT permissions on all table and other data objects that you want Lightup to monitor. Use standard DDL and roles.

Setting up an Authentication mode

You'll also need to identify/configure whichever authentication/identity service your Hive database uses. Lightup supports three: No Auth, Kerberos, and LDAP. The No Auth setting doesn't require additional settings; see below for Kerberos and LDAP.

Additional settings for Kerberos authentication

hive.server2.authentication.kerberos.principal – Kerberos principal for server.

hive.server2.authentication.kerberos.keytab – Keytab for server principal.


Hive has expanded support for Kerberos. Numerous new settings now appear in Lightup's datasource connector settings for Hive when you select Kerberos as the Auth type. Values for all Kerberos settings used by Lightup can be found in the /etc/hosts and /etc/krb5.conf files.

Additional settings for LDAP mode:

hive.server2.authentication.ldap.url – LDAP URL (for example, ldap://

hive.server2.authentication.ldap.baseDN – LDAP base DN. (Optional for AD.)

hive.server2.authentication.ldap.Domain – LDAP domain. (Hive 0.12.0 and later.)

See User and Group Filter Support with LDAP Atn Provider in HiveServer2 for other LDAP configuration parameters in Hive 1.3.0 and later.

Connector setting

  • Auth Type - Specify No Auth, Kerberos, or LDAP (whichever your Hive database is set up to use).
    • No Auth - No identity service is used. Lightup credentials are passed directly to the database.
    • Kerberos - Use a Kerberos key pair/ticketing service. You may be prompted to enter information, especially if it's the first time you're connecting Lightup.
    • LDAP - Use an LDAP directory service to handle connections. You'll need to set up the Lightup user in LDAP. Use the same name and password as for the database user.
  • Host - Enter the hostname and port for connecting to Hive.
  • Username - Enter whichever name you gave the Lightup database user.
  • Password - Enter the password for the account you created for Lightup.

In addition, any settings for the Auth type you chose will appear when you make that choice. See the preceding section for more information about authentication settings.

Schema scan frequency

You can adjust how often scans run for a datasource.

  • In section 3 - Advanced, select a value for Schema scan frequency: Hourly, Daily, or Weekly.

Query governance

Hive datasources support the Query history, Scheduling, and Enable data storage settings. For steps, see Set query governance settings for a datasource.