5.2.14.2 SEPPN32fMessageValidationOnHeaderFailureMajorAlert

Table 5-74 SEPPN32fMessageValidationOnHeaderFailureMajorAlert

Field Description
Trigger Condition Message validation failed for request query parameters for 60 % of requests (on which message validation was applied) in last 2 minutes.
Severity major
Alert Details Provided

Summary:

Namespace: {{ $labels.kubernetes_namespace }}, Podname: {{$labels.kubernetes_pod_name}}, App: {{ $labels.app }}, Nfinstanceid: {{ $labels.nfInstanceId }}
Expression:
(sum(rate(ocsepp_message_validation_on_header_failure_total{namespace="sepp-namespace"}[2m])) by (namespace, app, pod, nf_instance_id) /sum(rate(ocsepp_message_validation_applied_total{namespace="sepp-namespace"}[2m])) by (namespace, app, pod, nf_instance_id))*100 >= 60 < 80
OID 1.3.6.1.4.1.323.5.3.46.1.2.4027
Metric Name ocsepp_message_validation_on_header_failure_total
Resolution The alerts gets cleared when the count is not between 60 to 80.Possible Resolutions:
  1. Check Logs or Metrics:

    Review the following metrics for message validation failures:

    • ocsepp_message_validation_on_body_failure
    • ocsepp_message_validation_on_header_failure
  2. To identify the Failing Resource URI and HTTP Method, do the following:
    • For request body validation failures, search for the text: "Message validation failed for request body for request"
    • For query parameter validation failures, search for: "Message validation failed for request query parameter(s) for request"
    • For more detailed information about logs, refer to Oracle Communications Cloud Native Core, Security Edge Protection Proxy Troubleshooting Guide.
  3. In CNC Console GUI, navigate to SEPP and select Security Countermeasure from the left-hand menu.
    • Click Cat 0 - SBI Message Schema Validation to open the Message Validation List.
    • Search for the relevant resource URI to retrieve the corresponding schema.
    • Compare the request body or query parameters against the schema to ensure the request complies with the schema. If necessary, update the schema to reflect the correct structure.