Thingworx HA Primary server Tomcat stopped(Tomcat version 9.0.35)
Hi,
I have configured Thingworx 8.5.1 with HA Configuration.
Observed primary Tomcat was stopped and pointed to secondary server. I did not get the reason why Tomcat stopped. Also, verified system is not rebooted during that time. I have observed below errors on "tomcat9-stdout" file. Is Tomcat stopped because of below errors? Do I need to verify any other files in Tomcat logs?
2021-03-18 17:35:58 WARN IntrusionDetector:65 - [SECURITY FAILURE Anonymous:null@unknown -> /ExampleApplication/IntrusionDetector] Invalid input: context=HTTP header value: cf-visitor, type(HTTPHeaderValue)=^[a-zA-Z0-9()\-=\*\.\?;,+\/:&_ %$ ¡-￿'"]*$, input={"scheme":"https"}
org.owasp.esapi.errors.ValidationException: HTTP header value: cf-visitor: Invalid input. Please conform to regex ^[a-zA-Z0-9()\-=\*\.\?;,+\/:&_ %$ ¡-￿'"]*$ with a maximum length of 2000
at org.owasp.esapi.reference.validation.StringValidationRule.checkWhitelist(StringValidationRule.java:144)
at org.owasp.esapi.reference.validation.StringValidationRule.checkWhitelist(StringValidationRule.java:160)
at org.owasp.esapi.reference.validation.StringValidationRule.getValid(StringValidationRule.java:284)
at com.thingworx.security.filter.ESAPICustomValidator.getValidInput(ESAPICustomValidator.java:29)
at com.thingworx.security.filter.ValidatingHttpRequest.getValidInput(ValidatingHttpRequest.java:127)
at com.thingworx.security.filter.ValidatingHttpRequest.getValidHeaderInput(ValidatingHttpRequest.java:143)
at com.thingworx.security.filter.ValidatingHttpRequest.getHeader(ValidatingHttpRequest.java:85)
at com.thingworx.webservices.context.HttpExecutionContext.<init>(HttpExecutionContext.java:227)
at com.thingworx.webservices.BaseService.service(BaseService.java:310)
at javax.servlet.http.HttpServlet.service(HttpServlet.java:741)
Thanks&Regards,
Latha