Has anyone else encountered an occasional issue where the awi_ssl_request_log will grow exponentially? On most days, it runs about 30-40MB and gets rotated at 3am. One occasion, it will grow to about 3GB. I get our Hosting group complaining as they are getting incident tickets due to the log directory on the Tomcat server running out of space.
What's odd is that when this happens, we get over 100 of the same basic message in the log every second and it always appears to be from the same IP. The message below actually had over 200 of the same two messages every second. We know this IP is a Citrix server where we have some offshore people that use the system.
We have dealt with this off and on for months. I have even opened a ticket with Support but never got any cause or resolution.
10.50.84.193 - [23/Apr/2021:03:06:03 -0400] "GET /awi/PUSH?v-uiId=0&v-pushId=0938f92a-a930-4e65-858d-17c1a50573f6&X-Atmosphere-tracking-id=ef4c027b-3244-42fa-961b-921aa71c2140&X-Atmosphere-Framework=2.2.13.vaadin5-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=application%2Fjson%3B%20charset%3DUTF-8&X-atmo-protocol=true&_=1619161563514 HTTP/1.1" 200 152 654 "https://uc4-link/awi/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.72 Safari/537.36"
10.50.84.193 - [23/Apr/2021:03:06:03 -0400] "GET /awi/PUSH?v-uiId=0&v-pushId=fbb11e48-646d-48a9-a2f8-14ff1e94d613&X-Atmosphere-tracking-id=767154f7-926b-4907-ac53-0e71de1fbe05&X-Atmosphere-Framework=2.2.13.vaadin5-javascript&X-Atmosphere-Transport=long-polling&X-Atmosphere-TrackMessageSize=true&Content-Type=application%2Fjson%3B%20charset%3DUTF-8&X-atmo-protocol=true&_=1619161563518 HTTP/1.1" 200 152 690 "https://uc4-link/awi/" "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/90.0.4430.72 Safari/537.36"
We have two Tomcat servers hosted on Linux using an F5 for load balancing. I believe we have only encountered this in our non-production environment.