Crowdstrike fdrv2 bugfix for timeouts (#8811)

* Optimizing Cost * Cost * Dynamic concurrency enabled * Bugfix and unified parser * Update CrowdStrikeReplicator.yaml * Update CrowdStrikeReplicator.yaml * yaml validation fixes * Update CrowdStrikeReplicator.yaml * Update Solution_CrowdStrike.json * added/updated package to pr * Revert "added/updated package to pr" This reverts commit a9889cc. * Auth table replacement * Update CrowdstrikeReplicatorV2_ConnectorUI.json * Revert "Update CrowdstrikeReplicatorV2_ConnectorUI.json" This reverts commit ece3f52. * Revert "Auth table replacement" This reverts commit 640fa55. * Fixes * Update azuredeploy_cdfdrv2_connector.json * Update createUiDefinition_csfdrv2_connector.json * Update azuredeploy_cdfdrv2_connector.json * Table tier fix * Update azuredeploy_cdfdrv2_connector.json * Added tag property * Create CrowdStrikeFalconTest.zip * Bug fix * Update main_aws_queue.py * Update azuredeploy_cdfdrv2_connector.json * TimeOut fix --------- Co-authored-by: GitHub <noreply@github.com>
Azure · Aug 18, 2023 · 8612340 · 8612340
1 parent 17cd142
commit 8612340
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 6 deletions.
diff --git a/...onnectors/CrowdstrikeReplicatorCLv2/CSFDRv2_Deploymnet/azuredeploy_cdfdrv2_connector.json b/...onnectors/CrowdstrikeReplicatorCLv2/CSFDRv2_Deploymnet/azuredeploy_cdfdrv2_connector.json
@@ -81,7 +81,7 @@
       }
     },
     "Expected_EPS_volume": {
-      "defaultValue": 40000,
+      "defaultValue": 25000,
       "type": "Int"
     },
     "function-name": {

diff --git a/...Protection/Data Connectors/CrowdstrikeReplicatorCLv2/CrowdstrikeFalconAPISentinelConn.zip b/...Protection/Data Connectors/CrowdstrikeReplicatorCLv2/CrowdstrikeFalconAPISentinelConn.zip
diff --git a/...s/CrowdstrikeReplicatorCLv2/CrowdstrikeFalconAPISentinelConn/Replicator/main_aws_queue.py b/...s/CrowdstrikeReplicatorCLv2/CrowdstrikeFalconAPISentinelConn/Replicator/main_aws_queue.py
@@ -57,8 +57,8 @@ async def main(mytimer: func.TimerRequest):
             mainQueueCount = mainQueueHelper.get_queue_current_count()
             logging.info("Main queue size is {}".format(mainQueueCount))
             while mainQueueCount >= MAX_QUEUE_MESSAGES_MAIN_QUEUE:
-                time.sleep(5)
-                if check_if_script_runs_too_long(0.9, script_start_time):
+                time.sleep(15)
+                if check_if_script_runs_too_long(0.7, script_start_time):
                     logging.warn("Main queue already have enough messages to process. Not clearing any backlog or reading a new SQS message in this iteration.")
                     return
                 mainQueueCount = mainQueueHelper.get_queue_current_count()
@@ -69,19 +69,19 @@ async def main(mytimer: func.TimerRequest):
             mainQueueCount = mainQueueHelper.get_queue_current_count()
             while backlogQueueCount > 0:
                 while mainQueueCount >= MAX_QUEUE_MESSAGES_MAIN_QUEUE:
-                    time.sleep(5)
+                    time.sleep(15)
                     mainQueueCount = mainQueueHelper.get_queue_current_count()
                 messageFromBacklog = backlogQueueHelper.deque_from_queue()
                 if messageFromBacklog != None:
                     mainQueueHelper.send_to_queue(messageFromBacklog.content,False)
                     backlogQueueHelper.delete_queue_message(messageFromBacklog.id, messageFromBacklog.pop_receipt)
                     backlogQueueCount = backlogQueueHelper.get_queue_current_count()
                     mainQueueCount = mainQueueHelper.get_queue_current_count()
-                if check_if_script_runs_too_long(0.9, script_start_time):
+                if check_if_script_runs_too_long(0.7, script_start_time):
                     logging.warn("Main queue already have enough messages to process. Read messages from backlog queue but not reading a new SQS message in this iteration.")
                     return
 
-            if check_if_script_runs_too_long(0.75, script_start_time):
+            if check_if_script_runs_too_long(0.5, script_start_time):
                 logging.warn("Queue already have enough messages to process. Read all messages from backlog queue but not reading a new SQS message in this iteration.")
                 return