How to remove KSN connection error on web [KATA/KEDRE]

[Antipova Anna]

Advice and Solutions (Forum Knowledgebase) Disclaimer. Read before using materials.

Description and cautions

KSN connection error on KATA web may appear.

Details

1. It could be fixed unless you don't have permanent KSN errors, you have to check it in ksn_proxy.log DEBUG level. Key word is ErrCount. If you don't see Errcount: 0 in log, then you don't have access to our KSN servers which are: 

• *.ksn.kaspersky-labs.com
• ksn-*.kaspersky-labs.com
• ds.kaspersky.com

       2. In order to fix this web error do as below

For KATA 4.0/4.1

           Under root at CN execute:

apt-settings-manager set --merge /configuration/preprocessor '{"ksn": {"non_dl_formats": ["GeneralHtml", "GeneralTxt", "ExecutableJs", "ImageGif", "ImageJpeg", "ImagePng", "ArchiveCab"], "request_threads": 4, "timeout": "PT1.5S"}}'

            * PT1.5S means 1,5 seconds, don't increase it more

          Then let's increase "errors_increase_threshold": 100 (actually you have to check ksn_proxy debug log in order to understand how much KSN connection errors you have and adjust this parameter accordingly)

apt-settings-manager set --merge /configuration/monitoring_prometheus '{"ksn_proxy": {"errors_increase_threshold": 100, "errors_window_period": "10m", "scraping_alert_for_interval": "1m", "scraping_evaluation_interval": "30s"}}'           If this helps, then make this change persistent:

              vim /etc/opt/kaspersky/apt-swarm/swarm_config.json

 "ksn": {

                "non_dl_formats": [ Numbered list

                    "GeneralHtml",

                    "GeneralTxt",

                    "ExecutableJs",

                    "ImageGif",

                    "ImageJpeg",

                    "ImagePng",

                    "ArchiveCab"

                ],

                "request_threads": 4,

                "timeout": "PT0.5S"  <<<<< set 1.5S

           Find

"ksn_proxy": {

                    "errors_increase_threshold": 2, <<<<< set 100

                    "errors_window_period": "10m",

                    "scraping_alert_for_interval": "1m",

                    "scraping_evaluation_interval": "30s"

 

For KATA 5.+/6.+

Use one line:

• console-settings-updater set --merge /kata/configuration/product/monitoring_prometheus '{"alert_settings": {"ksn_proxy": {"errors_increase_threshold": 100}}}'

   if value 100 doesn't help you may increase it to 150-200.

 

Or use long way: 

• Under root at CN execute 

  console-settings-updater get /kata/configuration/product/monitoring_prometheus | python3 -m json.tool > /tmp/monitoring_prometheus

• Make changes in /tmp/monitoring_prometheus (via vim or nano) by finding following block

"ksn_proxy": {
            "errors_increase_threshold": 100, <<<<<< put here value 100 instead of default 2

• Save file (ESC:wq!)
• Put changes back to container 

• console-settings-updater set /kata/configuration/product/monitoring_prometheus @/tmp/monitoring_prometheus

    If value 100 doesn't help you may increase it to 150-200.