We are receiving alarms like:
Throughput of EventLogging EventError events is CRITICAL
because an external wiki is sending bursts of malformed events.
The user agent used is "Fuzz Faster U Fool v1.2.0-git".
Those events are already filtered out at Refine time, so do not represent a danger to data ingetrity.
However, they are failing verification and forwarded to EventLogging_EventError topic, which generates the mentioned alarms.
Description
Description
Details
Details
| Subject | Repo | Branch | Lines +/- | |
|---|---|---|---|---|
| Exclude predefined user agents from eventlogging data | operations/puppet | production | +9 -10 |
Event Timeline
Comment Actions
Temporarily going to block this user agent; hoping to deprecate this system eventually.
Comment Actions
Change 636493 had a related patch set uploaded (by Ottomata; owner: Ottomata):
[operations/puppet@production] Exclude predefined user agents from eventlogging data
Comment Actions
Change 636493 merged by Ottomata:
[operations/puppet@production] Exclude predefined user agents from eventlogging data
Comment Actions
Mentioned in SAL (#wikimedia-analytics) [2020-10-27T17:38:00Z] <ottomata> restrict Fuzz Faster U Fool user agents from submittnig eventlogging legacy systemd data - T266130