Excessive volume of logs in syslog for guest - "Failed to authenticate request using authentication profiles" - Known Error

Excessive volume of logs in syslog for guest - "Failed to authenticate request using authentication profiles" Description The message: "Failed to authenticate request using authentication profiles" is logged in System logs > Errors when

REST API Access Policies exist for a specific resource / REST API Path or Global REST API Access Policy Authentication via the specified authentication profile is unsuccessful The message is also logged when the user is a guest user/unauthenticated.

In some instances, we have observed that the count of this message is very high and a common cause is due to the large number of unauthenticated/guest transaction to the rest api path. This may be due to a misconfiguration at the source.

If the count of these messages is high, the impact would be bloated syslog tables. As syslog participates in Table rotation, the growth is mitigated as the tables are rotated/deleted after the specified duration.

Steps to Reproduce

Navigate to System logs > Errors and add the filter for Message starts with Failed to authenticate request using authentication profiles

Workaround There is no workaround to prevent the logging of the message: "Failed to authenticate request using authentication profiles". Please upgrade to a fixed release where the message will be logged when debug is enabled.

The volume of this log is not expected to be high. If the daily count is very high (>hundred thousand), the source of the transactions should be investigated and rectified as the transactions are from unauthenticated users and may be a result of a misconfiguration at the source.