CrowdSecC
CrowdSec7mo ago
alukas

Stuck sending event

Hi there!
Yesterday our wordpress systems were under a denial of service attack from quite a large botnet. Not blocking this automatically was probably due to us not having CrowdSec properly configured, but this is something we will figure out.

However, upon looking through the logs I've found that quite often we get logs like this (a few dozen lines of the sort each time):
time="2025-06-03T00:53:43+02:00" level=warning msg="stuck for 100.045065ms sending event to cf940ed6ecee9958fbf45df56908a9621617b293 (sigclosed:0 failed_sent:7099999 attempts:7100000)" cfg=summer-shape name=crowdsecurity/http-probing

However, the identifier after
to
is always different. Could you please tell me more about this log?
I assumed it was trying to send the event to our LAPI, but the identifier being different each time tells me I'm wrong.
Based on our graphs, I couldn't identify a CPU, RAM or network bottleneck either that would cause it to delay (neither on the LAPI neither on the client server).
Was this page helpful?