EPSS data feed logging?

[JoergBruenner]

Hi,

I'm running 2 stages of Dependency Track. One of them (v4.12.0) has recent EPSS data, the other one (4.11.3) not. The firewall rules are the same for both. Is there any way to check the EPSS import feed?

Thanks a lot for your help
Jörg

[fupgang]

Hi,

the EpssMirrorTask writes some logs, e.g.

ERROR [EpssMirrorTask] Download failed : Connection reset

[SkripteDT]

Hi @fupgang,

thank you, that was a good direction to look for :-)

One of my systems failed because there is a firewall preventig DT from reaching https://epss.cyentia.com/.
I haven't realized cyentia.com is used at all. There is the manaual entry I've overlooked?

The other system doesn't even start the EpssMirrorTask. There isn't a log entry of the NistApiMirrorTask too :-(
Do you have any idea where to search why this jobs will fail?

Thanks a lot
Jörg

[SkripteDT]

Hi all,

which configuration entries relates to the following log entries:

2025-04-19 07:33:37,005 INFO [NistApiMirrorTask] Mirroring of 1365 CVEs completed in PT17.446641496S
2025-04-19 07:33:37,013 INFO [EpssMirrorTask] Starting EPSS mirroring task
2025-04-19 07:33:37,014 INFO [EpssMirrorTask] Initiating download of https://epss.cyentia.com/epss_scores-current.csv.gz
2025-04-19 07:33:37,355 INFO [EpssMirrorTask] Downloading...
2025-04-19 07:33:37,419 INFO [EpssMirrorTask] Uncompressing epss_scores-current.csv.gz
2025-04-19 07:33:37,492 INFO [EpssParser] Parsing epss_scores-current.csv

I've one instance producing that logs, the other one does not :-(

Thank you
Jörg