[statscheck] Stats/Server Overload

[J.C]

I've had a look around and I've tinkered with a few bits and bobs but I'm still receiving these emails. So far I've restarted the box hoping that would help the lag but unfortunately it wasn't that simple. I then proceeded to "WHM >> Tweak Settings" and checked the box "delete each domain's access logs after stats run." I've waited 24 hours but still no luck.

I've noticed on a few other threads people mention "domlogs". I've had a look in "usr/local/apache/domlogs" and there seems to be a number of .log files. How can I find out the log size for the domain in question?

IMPORTANT: Do not ignore this email.
This is cPanel stats runner on server1.mydomain.co.uk!
While processing the log files for user montana4, the cpu has been
maxed out for more than a 6 hour period. The current load/uptime line on the server at the time of
this email is
06:09:53 up 3 days, 21:18, 0 users, load average: 1.02, 0.67, 0.63
You should check the server to see why the load is so high and take
steps to lower the load. If you want stats to continue to run even with a high load; Edit
/var/cpanel/cpanel.config and change extracpus to a number larger then 0 (run
/usr/local/cpanel/startup afterwards to pickup the changes).

IMPORTANT: Do not ignore this email.
This is cPanel stats runner on server1.mydomain.co.uk!
While processing the log files for user montana4, the cpu has been
maxed out for more than a 6 hour period. The current load/uptime line on the server at the time of
this email is
12:10:04 up 5 days, 3:18, 0 users, load average: 1.02, 0.63, 0.62

As of 17:32 GMT this was my "top" command.

18424 montana4 17 0 7992 4312 2096 R 1.3 1.0 0:00.04 php
18404 root 16 0 2024 1016 800 R 0.3 0.2 0:00.03 top
1 root 16 0 1740 340 308 S 0.0 0.1 0:01.41 init
2 root 34 19 0 0 0 S 0.0 0.0 0:00.00 ksoftirqd/0
3 root 10 -5 0 0 0 S 0.0 0.0 0:01.40 events/0
4 root 16 -5 0 0 0 S 0.0 0.0 0:00.00 khelper
5 root 10 -5 0 0 0 S 0.0 0.0 0:00.00 kthread
7 root 10 -5 0 0 0 S 0.0 0.0 0:01.78 kblockd/0
10 root 10 -5 0 0 0 S 0.0 0.0 0:00.00 khubd
47 root 15 0 0 0 0 S 0.0 0.0 0:00.15 kapmd
85 root 13 -5 0 0 0 S 0.0 0.0 0:00.00 aio/0
84 root 15 0 0 0 0 S 0.0 0.0 0:59.68 kswapd0
172 root 10 -5 0 0 0 S 0.0 0.0 0:00.00 kseriod
277 root 10 -5 0 0 0 S 0.0 0.0 0:00.00 ata/0
281 root 11 -5 0 0 0 S 0.0 0.0 0:00.00 scsi_eh_0
282 root 11 -5 0 0 0 S 0.0 0.0 0:00.00 scsi_eh_1
296 root 15 0 0 0 0 S 0.0 0.0 0:51.68 kjournald
483 root 11 -4 1648 288 284 S 0.0 0.1 0:00.11 udevd
1126 root 23 0 0 0 0 S 0.0 0.0 0:00.00 kjournald
1499 root 16 0 1612 436 368 S 0.0 0.1 0:03.02 syslogd
1501 root 16 0 1568 280 276 S 0.0 0.1 0:00.00 klogd
1513 root 13 -3 11968 448 356 S 0.0 0.1 0:01.07 auditd
1515 root 10 -5 0 0 0 S 0.0 0.0 0:00.02 kauditd
1540 root 16 0 4384 208 168 S 0.0 0.0 0:00.00 rpc.idmapd
1551 root 16 0 2156 332 328 S 0.0 0.1 0:00.00 hcid

Any help would be appreciated and I apologise for repeating a question that may already be well addressed.

[J.C]

I've also done "vdir /usr/local/apache/domlogs" and I find the following for the domain name in question: "-rw-r----- 1 root montana4 5779054 Jun 21 15:05 mydomain.com." I'm guessing "5779054" is the file size? Other files go up as large as "116569107". Do I need to delete these files or can I just edit them and remove old data from the beginning of the log?

[kship]

I had the same issue and here is what i did:

I logged in via ssh and did top command to see what processes were running high. The top 3 processes (80% and up) were associated with a certain client and it was spamd. I killed all 3 processes and watched the server load drop to normal. I am not sure why this happened. I upgraded to the newest current build 2 days ago and then I started receiving the stats overload emails immediately afterwards (within a fewe hours) and emails stating that spamd has failed etc...I will watch for more of these and report back.

Either a coincidence or a problem that surfaced right after I updated. I had not had any problems with this server up to this point. This particular server has been in production for 6 months.

[ddeans]

Check this out as well.

WHM -> Server Configuration -> Tweak Settings -> Under Stats and Logs, check the box that says Delete each domain's access logs after stats run

Is it Checked or Un Checked? If it is unchecked, then you may want to check it, as it will delete the logs after each stats update and there won't be near as much for the server to process daily.

[kship]

it is checked and has been. I ended up removing spam assasin and so far so good.

[J.C]

I've finally resolved this after all this time.

Logged into cPanel > Statistics Software Configuration then unchecked 'Analog'.