5.2.14.3 SEPPN32fMessageValidationOnHeaderFailureCriticalAlert

Table 5-75 SEPPN32fMessageValidationOnHeaderFailureCriticalAlert

Field Description
Trigger Condition Message validation failed for request query parameters for 80 % of requests (on which message validation was applied) in last 2 minutes.
Severity critical
Alert Details Provided

Summary:

Namespace: {{ $labels.kubernetes_namespace }}, Podname: {{$labels.kubernetes_pod_name}}, App: {{ $labels.app }}, Nfinstanceid: {{ $labels.nfInstanceId }}
Expression:
(sum(rate(ocsepp_message_validation_on_header_failure_total{namespace="sepp-namespace"}[2m])) by (namespace, app, pod, nf_instance_id) /sum(rate(ocsepp_message_validation_applied_total{namespace="sepp-namespace"}[2m])) by (namespace, app, pod,  nf_instance_id))*100 >= 80
OID 1.3.6.1.4.1.323.5.3.46.1.2.4028
Metric Name ocsepp_message_validation_on_header_failure_total
Resolution This alert is cleared when the count is less than 80.

Possible Resolutions:
  1. Check Logs or Metrics:

    Review the following metrics for message validation failures:

    • ocsepp_message_validation_on_body_failure
    • ocsepp_message_validation_on_header_failure
  2. To identify the Failing Resource URI and HTTP Method, do the following:
    • For request body validation failures, search for the text: "Message validation failed for request body for request"
    • For query parameter validation failures, search for: "Message validation failed for request query parameter(s) for request"
    • For more detailed information about logs, refer to Oracle Communications Cloud Native Core, Security Edge Protection Proxy Troubleshooting Guide.
  3. In CNC Console GUI, navigate to SEPP and select Security Countermeasure from the left-hand menu.
    • Click Cat 0 - SBI Message Schema Validation to open the Message Validation List.
    • Search for the relevant resource URI to retrieve the corresponding schema.
    • Compare the request body or query parameters against the schema to ensure the request complies with the schema. If necessary, update the schema to reflect the correct structure.