Odd API requests after upgrade to 2.11.1

Security
1

I’ve just upgraded to Opensearch 2.11.1 and ever since the upgrade I am seeing some odd Usernames and requests in the audit log.

The usernames look something like this:

ACb6db1303639164c6fb0adc2f98b59d60
ACa7a1b52d235ed7189a6bce695a48d75d

and the paths they are accessing are

/api/4.0/edges
/api/v1/edge-clusters
/mgmt/tm/ltm

They all come from localhost 127.0.0.1 and ::1

They don’t look like OpenSearch URLs to me, but they started exactly when I upgraded from 2.9.0 to 2.11.1. Can anyone help me understand what these are and how to make them go away?

2

good question. would like to know also. have the same problem

3

Hi @jong,

How did you deploy your cluster? Is there by any chance IBM Edge Application Manager involved?

Best,
mj