How to disable /rest/analytics/1.0/publish/bulk?

[Alexey_Efimov]

We have a lot of strange POSTs to this REST on our Bitbucket instance. Can i to disable System Plugin? Why it do something if all Analytics disabled in Server settings?

It make 20k request per day.

[no_longer_in_sudoers_file]

We recently solve this on one system by using the following in our NGINX front-end server:

location /rest/analytics/1.0/publish/bulk {
        deny all;
        return 200;
}
  location /rest/analytics/1.0/publish/bulk/ {
      deny all;
      return 200;
  }

Updated with more accurate code block. Note: by blocking this at the Front-end reverse proxy (nginx) layer, it takes load off the application.

[Raul MrAddon]

Here some tricks to avoid this problem (and others)

https://mraddon.blog/2017/09/30/two-tricks-to-improve-the-performance-and-security-of-your-jira-server-7-4/

[Kristy]

Hi Alexey,

The "disable" button on the analytics plugin settings page only prevents the analytics plugin from uploading data to Atlassian. We cannot guarantee that turning off a system plugin will not cause any failures, and Atlassian does not offer support if it does.

Hope this helps,

Kristy

[no_longer_in_sudoers_file]

An observation from Atlassian Site Reliability:

(1) Turning off the analytics plugin (from what we see) does not appear to adversely affect this site (answers.atlassian.com) which is based on Confluence.

(2) Disabling the analytics plugin does not turn off the JavaScript in the UI that sends requests to the server.  This is why we blocked the URL end points on the FE servers, since every time Google would reindex the system it would generate n-times more requests than were necessary.

Disclaimer

As Kristy says (above), this is not supported by the product. The information is presented as the latest information from a production system using the same product you are using to run one of our public-facing systems. That said, if you choose to disable/block this end point, make sure you test the results on your system to ensure it doesn't break anything.

[Raul MrAddon]

Tricks to block this URL from Jira:

https://mraddon.blog/2017/09/30/two-tricks-to-improve-the-performance-and-security-of-your-jira-server-7-4/

[Michael Roßmann]

Apparently the plugin has removed its blacklist-feature :(