You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Add troubleshooting steps related to InsightsRpc (#139)
* Added the latest release tag for added user convenience
* ZDM-575 Add troubleshooting scenario to deal with InsightsRpc related permission errors in ZDM proxy logs
---------
Co-authored-by: Madhavan Sridharan <[email protected]>
Copy file name to clipboardExpand all lines: docs-src/zdm-core/modules/migrate/pages/troubleshooting-scenarios.adoc
+31-1Lines changed: 31 additions & 1 deletion
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -452,4 +452,34 @@ If you are using simple statements, consider using prepared statements as the be
452
452
453
453
Increasing the number of proxies might help, but only if the VMs resources (CPU, RAM or network IO) are near capacity. The {zdm-proxy} doesn't use a lot of RAM, but it uses a lot of CPU and network IO.
454
454
455
-
Deploying the proxy instances on VMs with faster CPUs and faster network IO might help, but only your own tests will reveal whether it helps, because it depends on the workload type and details about your environment such as network/VPC configurations, hardware, and so on.
455
+
Deploying the proxy instances on VMs with faster CPUs and faster network IO might help, but only your own tests will reveal whether it helps, because it depends on the workload type and details about your environment such as network/VPC configurations, hardware, and so on.
456
+
457
+
458
+
== `InsightsRpc` related permissions errors
459
+
460
+
=== Symptoms
461
+
462
+
{zdm-proxy} logs contain:
463
+
464
+
[source,log]
465
+
----
466
+
time="2023-05-05T19:14:31Z" level=debug msg="Recording ORIGIN-CONNECTOR other error: ERROR UNAUTHORIZED (code=ErrorCode Unauthorized [0x00002100], msg=User my_user has no EXECUTE permission on <rpc method InsightsRpc.reportInsight> or any of its parents)"
467
+
time="2023-05-05T19:14:31Z" level=debug msg="Recording TARGET-CONNECTOR other error: ERROR SERVER ERROR (code=ErrorCode ServerError [0x00000000], msg=Unexpected persistence error: Unable to authorize statement com.datastax.bdp.cassandra.cql3.RpcCallStatement)"
468
+
----
469
+
470
+
=== Cause
471
+
472
+
This could be the case if the origin (DSE) cluster has Metrics Collector enabled to report metrics for {company} drivers and `my_user` does not have the required permissions. {zdm-proxy} simply passes through these.
473
+
474
+
=== Solution or Workaround
475
+
476
+
There are two options to get this fixed.
477
+
478
+
==== Option 1: Disable DSE Metrics Collector
479
+
480
+
* On the origin DSE cluster, run `dsetool insights_config --mode DISABLED`
481
+
* Run `dsetool insights_config --show_config` and ensure the `mode` has a value of `DISABLED`
482
+
483
+
==== Option 2: Use this option if disabling metrics collector is not an option
484
+
485
+
* Using a superuser role, grant the appropriate permissions to `my_user` role by running `GRANT EXECUTE ON REMOTE OBJECT InsightsRpc TO my_user;`
0 commit comments