# Logs flooded with ssl messages

**URL:** <https://forums.percona.com/t/logs-flooded-with-ssl-messages/15156>\
**Category:** Percona Operator for MongoDB\
**Created:** [April 7, 2022, 9:44pm UTC](https://forums.percona.com/t/logs-flooded-with-ssl-messages/15156 "2022-04-07T21:44:37Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![dmn](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/dmn/32/6170_2.png) [@dmn](https://forums.percona.com/u/dmn)\
**Post date:** [April 7, 2022, 9:44pm UTC](https://forums.percona.com/t/logs-flooded-with-ssl-messages/15156/1 "2022-04-07T21:44:37Z")

</div>

Watching the logs of a fresh mongodb cluster, I see this constantly repeated

```auto
{"t":{"$date":"2022-04-07T21:16:59.236+00:00"},"s":"I", "c":"NETWORK", "id":22943, "ctx":"listener","msg":"Connection accepted","attr":{"remote":"172.16.109.243:44868","connectionId":1169946,"connectionCount":66}}
{"t":{"$date":"2022-04-07T21:16:59.242+00:00"},"s":"W", "c":"NETWORK", "id":23235, "ctx":"conn1169946","msg":"SSL peer certificate validation failed","attr":{"reason":"certificate signature failure"}}
{"t":{"$date":"2022-04-07T21:16:59.242+00:00"},"s":"I", "c":"NETWORK", "id":51800, "ctx":"conn1169946","msg":"client metadata","attr":{"remote":"172.16.109.243:44868","client":"conn1169946","doc":{"driver":{"name":"mongo-go-driver","version":"v1.7.0"},"os":{"type":"linux","architecture":"amd64"},"platform":"go1.17.5"}}}
{"t":{"$date":"2022-04-07T21:16:59.300+00:00"},"s":"I", "c":"-", "id":20883, "ctx":"conn1169946","msg":"Interrupted operation as its client disconnected","attr":{"opId":20369024}}
{"t":{"$date":"2022-04-07T21:16:59.300+00:00"},"s":"I", "c":"NETWORK", "id":22944, "ctx":"conn1169946","msg":"Connection ended","attr":{"remote":"172.16.109.243:44868","connectionId":1169946,"connectionCount":64}}

```

```auto
{"t":{"$date":"2022-04-07T21:30:25.417+00:00"},"s":"I", "c":"NETWORK", "id":22943, "ctx":"listener","msg":"Connection accepted","attr":{"remote":"172.16.86.217:40024","connectionId":1171393,"connectionCount":40}}
{"t":{"$date":"2022-04-07T21:30:25.417+00:00"},"s":"I", "c":"NETWORK", "id":23838, "ctx":"conn1171393","msg":"SSL mode is set to 'preferred' and connection to remote is not using SSL.","attr":{"connectionId":1171393,"remote":"172.16.86.217:40024"}}
{"t":{"$date":"2022-04-07T21:30:25.418+00:00"},"s":"I", "c":"NETWORK", "id":51800, "ctx":"conn1171393","msg":"client metadata","attr":{"remote":"172.16.86.217:40024","client":"conn1171393","doc":{"driver":{"name":"mongo-go-driver","version":"v1.7.0"},"os":{"type":"linux","architecture":"amd64"},"platform":"go1.17.5"}}}
{"t":{"$date":"2022-04-07T21:30:25.426+00:00"},"s":"I", "c":"ACCESS", "id":20250, "ctx":"conn1171393","msg":"Authentication succeeded","attr":{"mechanism":"SCRAM-SHA-256","speculative":true,"principalName":"clusterMonitor","authenticationDatabase":"admin","remote":"172.16.86.217:40024","extraInfo":{}}}
{"t":{"$date":"2022-04-07T21:30:25.431+00:00"},"s":"I", "c":"NETWORK", "id":22944, "ctx":"conn1171393","msg":"Connection ended","attr":{"remote":"172.16.86.217:40024","connectionId":1171393,"connectionCount":37}}

```

---

<div class="post-metadata">

**Author:** ![Sergey\_Pronin](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/sergey_pronin/32/14887_2.png) [@Sergey\_Pronin](https://forums.percona.com/u/Sergey_Pronin)\
**Post date:** [April 11, 2022, 10:52am UTC](https://forums.percona.com/t/logs-flooded-with-ssl-messages/15156/2 "2022-04-11T10:52:13Z")

</div>

@dmn these are not critical ones and do not affect the operations of the cluster.  
Do you feel we should decrease the amount of this noise?

---

<div class="post-metadata">

**Author:** ![dmn](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/dmn/32/6170_2.png) [@dmn](https://forums.percona.com/u/dmn)\
**Post date:** [April 12, 2022, 5:19pm UTC](https://forums.percona.com/t/logs-flooded-with-ssl-messages/15156/3 "2022-04-12T17:19:29Z")

</div>

Well my brain reads SSL something in the logs and my first instinct is something has gone wrong. If they are normal, I may just see about filtering them before shipping the logs, or adjust the default log verbosity settings

---

<div class="post-metadata">

**Author:** ![EXA\_NIX](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/exa_nix/32/8523_2.png) [@EXA\_NIX](https://forums.percona.com/u/EXA_NIX)\
**Post date:** [December 8, 2022, 2:18pm UTC](https://forums.percona.com/t/logs-flooded-with-ssl-messages/15156/4 "2022-12-08T14:18:48Z")

</div>

Could you provide me a link with how I can disable these notices in logs? I have tried to find it out but I failed.  
I have already disabled information logs on mongodb-mongos  
in console mongo

```auto
use admin
db.auth('clusterAdmin','password');
db.setLogLevel(1);

```

But when I do pause: true → pause: false I have got the same LogLevel=0

---

<div class="post-metadata">

**Author:** ![EXA\_NIX](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/exa_nix/32/8523_2.png) [@EXA\_NIX](https://forums.percona.com/u/EXA_NIX)\
**Post date:** [December 9, 2022, 2:25pm UTC](https://forums.percona.com/t/logs-flooded-with-ssl-messages/15156/5 "2022-12-09T14:25:50Z")

</div>

I have found how

> **[Custom Resource options - Percona Operator for MongoDB](https://docs.percona.com/percona-operator-for-mongodb/operator.html#replsets-configuration)**
>
> Documentation

---

<div class="post-metadata">

**Author:** ![EXA\_NIX](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/exa_nix/32/8523_2.png) [@EXA\_NIX](https://forums.percona.com/u/EXA_NIX)\
**Post date:** [December 10, 2022, 8:11am UTC](https://forums.percona.com/t/logs-flooded-with-ssl-messages/15156/6 "2022-12-10T08:11:33Z")

</div>

In the end, It is not possible to disable just network information messages although you can disable all messages meantime Error and Debug messages thus it is not production mode.

---

<div class="post-metadata">

**Author:** ![Sergey\_Pronin](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/sergey_pronin/32/14887_2.png) [@Sergey\_Pronin](https://forums.percona.com/u/Sergey_Pronin)\
**Post date:** [December 12, 2022, 9:16am UTC](https://forums.percona.com/t/logs-flooded-with-ssl-messages/15156/7 "2022-12-12T09:16:36Z")

</div>

Hey @EXA_NIX ,

unfortunately this is the limitation coming from mongodb itself.

You can set any option described here: [https://www.mongodb.com/docs/manual/reference/configuration-options/#core-options](https://www.mongodb.com/docs/manual/reference/configuration-options/#core-options)

You can do smth like this though:

```auto
  - name: rs0
...
    configuration: |
      systemLog:
        quiet: true
        component:
          network:
            verbosity: 3

```

This will set all the logs to quite mode, but keep high verbosity for network component. Or you can set other components verbosity levels as well.  
See here: [https://www.mongodb.com/docs/manual/reference/configuration-options/#systemlog.component-options](https://www.mongodb.com/docs/manual/reference/configuration-options/#systemlog.component-options)

---

<div class="post-metadata">

**Author:** ![Semantic](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/semantic/32/9104_2.png) [@Semantic](https://forums.percona.com/u/Semantic)\
**Post date:** [January 25, 2023, 5:08pm UTC](https://forums.percona.com/t/logs-flooded-with-ssl-messages/15156/8 "2023-01-25T17:08:00Z")

</div>

Hello @Sergey_Pronin & @Ege_Gunes (since you commented on that [here](https://forums.percona.com/t/basic-cluster-with-tls-not-working-operator-k8s-helm-setup/17844/16))

I was wondering if you could explain exactly _what_ connects to the cluster with unsecure options? Is it the pmm-agent & the backup-agent and is there a reason why they can’t use secure options?

Wouldn’t it also be less taxing on the server to keep those connections open without closing and reconnecting them all the time? My guess is that those constant reconnections and the logs they incur probably do not speed up the server! It’s probably minimal of course, but it does also create a lot of bloat which might silence actual important logs.

Thanks!

---

<div class="post-metadata">

**Author:** ![Semantic](https://sea1.discourse-cdn.com/flex019/user_avatar/forums.percona.com/semantic/32/9104_2.png) [@Semantic](https://forums.percona.com/u/Semantic)\
**Post date:** [May 20, 2024, 4:14pm UTC](https://forums.percona.com/t/logs-flooded-with-ssl-messages/15156/9 "2024-05-20T16:14:24Z")

</div>

Reviving this thread since I still believe it would be important to resolve the flooding in order to have important logs surfaced easily, while not having to turn on quiet mode (even if that one actually was silencing those connections logs) and still having the ability to detect if a connection keeps being closed and reopened, which might indicate an issue.

Wouldn’t it be possible for the Percona component(s) connecting to the deployment to keep a long-lived connection, and avoid those floods? Or is there implications in terms of performance?

Thanks @Sergey_Pronin!

[Related post](https://forums.percona.com/t/reduce-logging-crversion-1-9-0/12848/5)