Is it normal behavior for the plugin service to connect to the Server via API multiple times per second? The server_audit.log file is basically useless because of this.
Something to keep in mind is that the plugin service doesn’t really do very much by itself. The main purpose of the plugin service is to invoke and provide credentials to plugins. The plugins then use those credentials to do whatever they were designed to do.
So the first step would be to outline which plugins you have installed and which ones are running when you’re seeing the logins in the audit log.
1 Like
In this case, it was the Server Automation Plan Engine that was the culprit. It was doing 4 logins every 3 seconds, the default polling interval, per the documentation. I configured it to poll every 60 seconds.
1 Like