All modules
FoundationModule 04Week 3

Hadoop, CDP and Hue: understand the current estate

“It runs in Hue” does not identify a SQL dialect, a permissions model or a storage format. Start by identifying the engine behind the interface.

01What each name means

Hadoop is an ecosystem. HDFS is distributed file storage. YARN manages cluster resources. Hive provides SQL-oriented table metadata and processing. Spark is a distributed processing engine. Impala is another SQL engine often encountered in Cloudera environments. CDP likely means Cloudera Data Platform here, but confirm this locally.

Hue is a browser-based interface to configured engines. First ask which connection is selected.

02Safe daily workflow

A LIMIT restricts returned rows; it does not reliably guarantee a cheap scan. Date predicates on the relevant partition column are often more useful. Functions or casts on a filtered column may affect optimisation; inspect the plan instead of assuming.

  1. 01Identify the environment and engine before querying.
  2. 02Select the approved database and inspect table definitions, descriptions and partition columns.
  3. 03Find the owner, grain and freshness expectations in the catalogue.
  4. 04Select explicit columns, a narrow date range and a small result limit.
  5. 05Inspect the execution plan when available and estimate the data scanned.
  6. 06Save the query with its purpose, engine, assumptions and validation notes.
  7. 07Record the query ID for troubleshooting. Follow internal rules for exports.

03What the analyst must inventory

For every dataset record: HDFS location, table type, file format, partitions, schema, source owner, row grain, volumes, update/delete behaviour, ingestion job, scheduler, downstream consumers, access controls and retention. Include views, UDFs, shell scripts, service accounts and external integrations. Files alone are not a complete system.

Parquet and ORC are columnar formats. CSV is text with parsing conventions. A Parquet file does not by itself provide transaction semantics or an authoritative catalogue. Managed and external tables have different lifecycle behaviours that depend on engine and version; confirm before moving or deleting anything.

04Common incidents

Start with the query ID, exact SQL, engine, time range and expected result. Do not immediately rerun a heavy workload.

  • Empty result: wrong environment, missing partition registration, an overly restrictive date filter or an access policy.
  • Duplicate rows: source resends, a join at the wrong grain or repeated ingestion.
  • Slow query: excessive scanning, skewed joins, small files or expensive transformations.
  • Different totals: timestamp interpretation, decimal conversion, case sensitivity, NULL handling or inconsistent snapshots.

Exercise

Prepare a one-page inventory for a fictional customer-risk Hive table. Explain how you would prove that a cloud replacement preserves its meaning.

Expected outcome

Include metadata and consumers, not just its path; compare a common snapshot using keys, values, history and business aggregates.

Financial Crime Data Architecture

A practical learning programme for analysts moving into financial crime data architecture and business analysis.

Quick start

Scope & assumptions

All labs use fictional data. Internal standards and approved platform configurations take precedence over illustrative design choices. Progress is demonstrated through deliverables and worked exercises, not reading alone.

Financial Crime Data Architecture — Training AcademyRead the lesson · Apply the exercise · Capture your evidence