5.2.14.1 SEPPN32fMessageValidationOnHeaderFailureMinorAlert

Table 5-73 SEPPN32fMessageValidationOnHeaderFailureMinorAlert

Field Details
Trigger Condition Message validation failed for request query parameters for 40 % of requests (on which message validation was applied) in last 2 minutes.
Severity minor
Alert Details Provided

Summary:

Namespace: {{ $labels.kubernetes_namespace }}, Podname: {{$labels.kubernetes_pod_name}}, App: {{ $labels.app }}, Nfinstanceid: {{ $labels.nfInstanceId }}

Expression:

(sum(rate(ocsepp_message_validation_on_header_failure_total{namespace="sepp-namespace"}[2m])) by (namespace, app, pod, nf_instance_id) /sum(rate(ocsepp_message_validation_applied_total{namespace="sepp-namespace"}[2m])) by (namespace, app, pod, nf_instance_id))*100 >= 40 < 60
OID 1.3.6.1.4.1.323.5.3.46.1.2.4026
Metric Used ocsepp_message_validation_on_header_failure_total
Resolution The alerts gets cleared when the count is not between 40 to 60.

Possible Resolutions:
  1. Check Logs or Metrics:

    Review the following metrics for message validation failures:

    • ocsepp_message_validation_on_body_failure
    • ocsepp_message_validation_on_header_failure
  2. To identify the Failing Resource URI and HTTP Method, do the following:
    • For request body validation failures, search for the text: "Message validation failed for request body for request"
    • For query parameter validation failures, search for: "Message validation failed for request query parameter(s) for request"
    • For more detailed information about logs, refer to Oracle Communications Cloud Native Core, Security Edge Protection Proxy Troubleshooting Guide.
  3. In CNC Console GUI, navigate to SEPP and select Security Countermeasure from the left-hand menu.
    • Click Cat 0 - SBI Message Schema Validation to open the Message Validation List.
    • Search for the relevant resource URI to retrieve the corresponding schema.
    • Compare the request body or query parameters against the schema to ensure the request complies with the schema. If necessary, update the schema to reflect the correct structure.