Identity service token endpoint is not accessible

Description

This alert is triggered when the Identity Server's token endpoint health check reports that the token endpoint is not accessible.

Resolution Guidance

Impact When Active

When this alert is triggered, the Identity Server may be unable to issue or validate authentication tokens. This can prevent users and services from authenticating, resulting in login failures or service-to-service authentication errors across any Relativity application that depends on the Identity Server.

How To Resolve

  • Confirm the Identity Server (Relativity_Server_IdentityService) is running on the host reporting the alert.
  • Review the Identity Server logs around the alert's active time window to identify the underlying failure.
  • Restart the Identity Server service if it is unresponsive.
    • If you restart the service, make sure you warn users of a possible brief authentication disruption.
  • You can also try:
    • Verifying network connectivity between the host and the Identity Server's token endpoint.
    • Confirming any certificates required by the token endpoint have not expired.

Alert Details

The alert is active for the following conditions in Relativity:

  • When the Identity Server's token endpoint health check reports relsvr_idsvr_token_access as false.

Alert Condition Details

Name Value
Rule Type Elastic Query
Data View logs-*
Filter Query service.name : "Relativity_Server_IdentityService" AND labels.RequestPath : healthcheck/tokenendpoint AND labels.relsvr_idsvr_token_access : false
Threshold > 0
Time Window 5 min
Frequency 1 min

Alert Metric Details

Metric Name:

  • labels.relsvr_idsvr_token_access

Metric Description:

  • This metric monitors the accessibility of the Identity Server's token endpoint. The alert triggers when the health check reports the token endpoint as not accessible (false).

Metric Attributes:

Attribute Name Description
service.name Emitting service (Relativity_Server_IdentityService)
labels.RequestPath Health check request path
labels.relsvr_idsvr_token_access Whether the token endpoint is accessible
Feedback