ConfD User Community

Confd Audit notification logging every minute for session created by system

Hi,
We are using confd 7.2.1. We upgraded from 6.4.3 to 7.2.1. We notice in 7.2.1 that user_syslog.log file is getting logged with following messages:
Jul 31 00:00:19 localhost 2020-07-31 00:00:19,504 [Thread-0] WARN EventLog.confd- AuditNotification[logno=152, user=admin, usid=113110, msg=“created new session via system from 127.0.0.1:0 with tcp”]
Jul 31 00:00:19 localhost 2020-07-31 00:00:19,513 [Thread-0] WARN EventLog.confd- AuditNotification[logno=153, user=admin, usid=113110, msg=“terminated session (reason: normal)”]
Jul 31 00:00:25 localhost 2020-07-31 00:00:25,558 [Thread-0] WARN EventLog.confd- AuditNotification[logno=152, user=admin, usid=113111, msg=“created new session via system from 127.0.0.1:0 with tcp”]
Jul 31 00:00:25 localhost 2020-07-31 00:00:25,567 [Thread-0] WARN EventLog.confd- AuditNotification[logno=153, user=admin, usid=113111, msg=“terminated session (reason: normal)”]

Above messages are flooding user_syslog.log. This was not the case in 6.4.3 confd. Any suggestions to bypass these getting logged. Thanks in advance.

This is a known bug, fixed in ConfD releases 7.2.2/7.3.1/7.4.

Thanks. Is there any way to filter notifications based on session context then? We have java class with Notif. I am seeing user, userid from notification. How can i get session context from AuditNotification?

SESSION_CREATE audit event contains it in the msg part; I don’t know of anything better.