diff --git a/scripts/policy/frameworks/cluster/controller/request.zeek b/scripts/policy/frameworks/cluster/controller/request.zeek index 4fc648b511..d7bca5d1a3 100644 --- a/scripts/policy/frameworks/cluster/controller/request.zeek +++ b/scripts/policy/frameworks/cluster/controller/request.zeek @@ -77,7 +77,11 @@ export { function requests_expire_func(reqs: table[string] of Request, reqid: string): interval { - event ClusterController::Request::request_expired(reqs[reqid]); + # No need to flag request expiration when we've already internally marked + # the request as done. + if ( ! reqs[reqid]$finished ) + event ClusterController::Request::request_expired(reqs[reqid]); + return 0secs; }