Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

CB Response Cloud: /api/v1/alert calls are inefficient

CB Response Cloud: /api/v1/alert calls are inefficient

Environment

  • CB Response Cloud: 6.x and Higher
  • Actively using the API integration
  • cbapi: 1.4.2 and older
  • REST API

Symptoms

Slower-than-normal web browsing experience on the CB Response Cloud UI.

Cause

Excessive use of the /api/v1/alert can lead to an unusually high CPU usage, which in turn could create a slower-than-normal web browsing experience in the CB Response Cloud UI.  The "v1" alert calls are inefficient, resulting in queries that consume the solr cores multiple times every time the call is made.

Resolution

If using the cbapi, upgrade the cbapi package on any server(s) running integration scripts to version 1.4.3 or newer:
# pip install --upgrade cbapi

If using the REST API for /api/v1/alert GET requests, use /api/v2/alert instead.

Additional Notes

  • As always, please test integration changes on a dev machine first. 
  • The output of the v1 and v2 API call are different. If there's a need to upgrade to V2, the integration code may need to change. 

Related Content


Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎09-09-2020
Views:
451
Contributors