IRE Partial Payloads for SG-AWS-EC2 - AWS Service Graph Connector

Will O
Kilo Sage

Anyone else see higher rates of IRE Partial Payloads when it comes to the SG-AWS-EC2 job?


Working with SG-AWS and looking in the CMDB Integrations Dashboard, I noticed the SG-AWS-EC2 scheduled job appears to have a much higher number of IRE Partial Payloads when compared to the other SG-AWS related jobs.  Most SG-AWS jobs have 0 IRE Partial Payloads, while SG-AWS-Image-Private may have anywhere from 600-6,000.  However, the SG-AWS-EC2 job will complete successfully and show up to 60,000 IRE Partial Payloads.  

 

I have used the Identification Simulation (use existing payload) function, but it means I have to look at each individual payload separately.  Looking directly at the cmdb_ire_partial_payloads_index table, the records starting with "SG-AWS" seems to remain between 50-60,000, so at least it seems to be working itself out?  Per IRE documentation, the table will only deletes unnecessary records after 90 days, so it seems like it's actually matching and at least not growing exponentially?

 

Anyone else see higher rates of IRE Partial Payloads when it comes to the SG-AWS-EC2 job?

 

Any suggestions for better understanding trends when it comes to these types of records?

 

Thanks!

 

 

0 REPLIES 0