Confd Audit notification logging every minute for session created by system

Core Engine and APIs
1

Hi,
We are using confd 7.2.1. We upgraded from 6.4.3 to 7.2.1. We notice in 7.2.1 that user_syslog.log file is getting logged with following messages:
Jul 31 00:00:19 localhost 2020-07-31 00:00:19,504 [Thread-0] WARN EventLog.confd- AuditNotification[logno=152, user=admin, usid=113110, msg=“created new session via system from 127.0.0.1:0 with tcp”]
Jul 31 00:00:19 localhost 2020-07-31 00:00:19,513 [Thread-0] WARN EventLog.confd- AuditNotification[logno=153, user=admin, usid=113110, msg=“terminated session (reason: normal)”]
Jul 31 00:00:25 localhost 2020-07-31 00:00:25,558 [Thread-0] WARN EventLog.confd- AuditNotification[logno=152, user=admin, usid=113111, msg=“created new session via system from 127.0.0.1:0 with tcp”]
Jul 31 00:00:25 localhost 2020-07-31 00:00:25,567 [Thread-0] WARN EventLog.confd- AuditNotification[logno=153, user=admin, usid=113111, msg=“terminated session (reason: normal)”]

Above messages are flooding user_syslog.log. This was not the case in 6.4.3 confd. Any suggestions to bypass these getting logged. Thanks in advance.

2

This is a known bug, fixed in ConfD releases 7.2.2/7.3.1/7.4.

3

Thanks. Is there any way to filter notifications based on session context then? We have java class with Notif. I am seeing user, userid from notification. How can i get session context from AuditNotification?

4

SESSION_CREATE audit event contains it in the msg part; I don’t know of anything better.