JWS.70861 (Customer) asked a question.
rate limit trend
We are receiving rate limit warning in our splunk log, I understand the rate limit information is sent back through http header, but is there a way from splunk that we can see what limit it is reaching, 70% , 80%, 90%.
Right now, we only see it pass 60%, no further information is provided
debugData: { [-]
requestId: XWWeD8FJzbRz1jK-ushMaAAAAeA
requestUri: /api/v1/apps/0oae8uuyiWVpV9p8G356/skinny_users
threshold: 100
timeSpan: 1
timeUnit: MINUTES
url: /api/v1/apps/0oae8uuyiWVpV9p8G356/skinny_users?after=0uaf03dpdq8i8KVdV356&limit=200
userId: 00ue4epnyyfKnnX5g356
warningPercent: 60
}
Welcome to Okta Help Center.
At this moment, our warning percentages are hard coded to get triggered at specific values ( 60% or 90%) depending on the endpoint which is being hit. We can't modify or create a Splunk query to calculate when it reaches other values. I guess one idea would be for you to calculate to show events when it reaches 240 out 300 being hit which roughly estimates 75-80% but that's not something we are aware of nor can we supply at this moment.
Best regards,
Vlad Huma
Technical Support Engineer
The follow up question, in current setup (60% threshold), do you give out warning for each additional calls? For example, if I make 80 calls in a minute, I expect to see 20 warning entries. This will help us analyze.