Threat Report: Exposing Malware in Linux-Based Multi-Cloud Environments | Download Now

Nginx 403 on Newly Added Node

Nginx 403 on Newly Added Node

Version

6.x

Issue

Seeing Nginx 403 errors with the /data/eventlog/reserve request on the newly added minion - every single one of them.

Symptoms
In newly added minion Nginx access.log:

::ffff:10.200.100.50 - - [24/Jul/2017:09:16:36 -0700(0.000)] "GET /data/eventlog/reserve/24568 HTTP/1.1" 403 426 "-" "" ">127.0.0.1:9000" "-" "-"


Cause
Upon building a new minion and adding it to the cluster, a cluster.conf file from a 5.x server instance was used on the new 6.x system causing the new minion to reject any eventlog data from the new 6.x sensors.

Solution

Copy /etc/cb/cluster.conf from an old minion to replace the same file on this newly added minion.


Labels (1)
Was this article helpful? Yes No
No ratings
Article Information
Author:
Creation Date:
‎08-16-2017
Views:
714
Contributors