Multiple requests going to api.segment.io

Products

• Security Analytics

Issue/Introduction

The Security Analytics appliance is sending multiple requests to the URL api.segment.io.

High traffic volumes to api.segment.io post-upgrade.

There are multiple connections open with the postgres database listing /usr/sbin/scm license bytes_yesterday

Environment

Release : Previous to 8.2.2

Resolution

If you are running Security Analytics 8.2.2, this should not be a problem.  If you are running a version previous to 8.2.2, do the following:

• Comment out or delete the offending line in cron:     5 0 * * * /usr/sbin/scm license bytes_yesterday -q

To remove the line,

1. Login as root to the CLI.
2. Enter:  crontab -u apache -e
3. Go to the bottom of the crontab file and either comment our or delete the line "/usr/sbin/scm license bytes_yesterday -q"
4. Save the file

There may be a backup of requests in the queue, but eventually the Security Analytics appliance should stop sending requests to the URL.  One way you can kill the queued up processes is by running the following command:

ps -aux | grep bytes_yesterday | grep -v root | awk -F' ' '{ print $2 }' | xargs -n 1 -t kill

If after making the crontab change you are still seeing the requests, rebooting the entire appliance should stop all processes and clean everything up.