Duplicate logaccess / Spamd failing

[coursevector]

Hello,

Today our server notified us that SPAMD failed. This is the 3rd day in a row, around the same time. It restarts, but it has done this up until 3 days ago. I looked into the error logs and saw this just before it notified us of the error:

[2016-01-28 10:18:57 -0500] warn [cpsrvd] Duplicate logaccess: at /usr/local/cpanel/Cpanel/Server/Logger.pm line 84, <GEN15484> line 2.
    Cpanel::Server::Logger::logaccess(Cpanel::Server::Logger=HASH(0x2baa1c8)) called at /usr/local/cpanel/Cpanel/Server.pm line 379
    Cpanel::Server::logaccess(Cpanel::Server=HASH(0x2bf1f18)) called at cpsrvd.pl line 3116
    cpanel::cpsrvd::logaccess() called at cpsrvd.pl line 2771
    cpanel::cpsrvd::servcontent("./robots.txt", "text/plain", 1, 0, 1, 1, 0) called at cpsrvd.pl line 4438
    cpanel::cpsrvd::handle_unprotected_docs() called at cpsrvd.pl line 1043
    cpanel::cpsrvd::handle_one_connection() called at cpsrvd.pl line 890
    cpanel::cpsrvd::script() called at cpsrvd.pl line 379
at /usr/local/cpanel/Cpanel/Server/Logger.pm line 84, <GEN15484> line 2.
    Cpanel::Server::Logger::logaccess(Cpanel::Server::Logger=HASH(0x2baa1c8)) called at /usr/local/cpanel/Cpanel/Server.pm line 379
    Cpanel::Server::logaccess(Cpanel::Server=HASH(0x2bf1f18)) called at cpsrvd.pl line 3116
    cpanel::cpsrvd::logaccess() called at cpsrvd.pl line 2771
    cpanel::cpsrvd::servcontent("./robots.txt", "text/plain", 1, 0, 1, 1, 0) called at cpsrvd.pl line 4438
    cpanel::cpsrvd::handle_unprotected_docs() called at cpsrvd.pl line 1043
    cpanel::cpsrvd::handle_one_connection() called at cpsrvd.pl line 890
    cpanel::cpsrvd::script() called at cpsrvd.pl line 379

Is this related to SPAMD failing? What the heck is this?

 

[coursevector]

Here is the log with some context for the three days of errors. You can see right before SPAMD fails, there is no issues. But it annotates that it's building the global cache.

[2016-01-28 10:18:57 -0500] warn [cpsrvd] Duplicate logaccess: at /usr/local/cpanel/Cpanel/Server/Logger.pm line 84, <GEN15484> line 2.
    Cpanel::Server::Logger::logaccess(Cpanel::Server::Logger=HASH(0x2baa1c8)) called at /usr/local/cpanel/Cpanel/Server.pm line 379
    Cpanel::Server::logaccess(Cpanel::Server=HASH(0x2bf1f18)) called at cpsrvd.pl line 3116
    cpanel::cpsrvd::logaccess() called at cpsrvd.pl line 2771
    cpanel::cpsrvd::servcontent("./robots.txt", "text/plain", 1, 0, 1, 1, 0) called at cpsrvd.pl line 4438
    cpanel::cpsrvd::handle_unprotected_docs() called at cpsrvd.pl line 1043
    cpanel::cpsrvd::handle_one_connection() called at cpsrvd.pl line 890
    cpanel::cpsrvd::script() called at cpsrvd.pl line 379
 at /usr/local/cpanel/Cpanel/Server/Logger.pm line 84, <GEN15484> line 2.
    Cpanel::Server::Logger::logaccess(Cpanel::Server::Logger=HASH(0x2baa1c8)) called at /usr/local/cpanel/Cpanel/Server.pm line 379
    Cpanel::Server::logaccess(Cpanel::Server=HASH(0x2bf1f18)) called at cpsrvd.pl line 3116
    cpanel::cpsrvd::logaccess() called at cpsrvd.pl line 2771
    cpanel::cpsrvd::servcontent("./robots.txt", "text/plain", 1, 0, 1, 1, 0) called at cpsrvd.pl line 4438
    cpanel::cpsrvd::handle_unprotected_docs() called at cpsrvd.pl line 1043
    cpanel::cpsrvd::handle_one_connection() called at cpsrvd.pl line 890
    cpanel::cpsrvd::script() called at cpsrvd.pl line 379
[2016-01-28 10:22:20 -0500] info [tailwatchd] chkservd::Notify Notification => [email protected]***** via EMAIL [eventimportance => High (1)]
[2016-01-28 10:22:20 -0500] info [tailwatchd] chkservd::Notify Notification => ***** via PUSHBULLET [eventimportance => High (1)]
[2016-01-28 10:34:47 -0500] info [tailwatchd] chkservd::Notify Notification => [email protected]***** via EMAIL [eventimportance => High (1)]
[2016-01-28 10:34:47 -0500] info [tailwatchd] chkservd::Notify Notification => ***** via PUSHBULLET [eventimportance => High (1)]
Building global cache for cpanel...Done
   
[2016-01-27 11:32:47 -0500] info [tailwatchd] chkservd::Notify Notification => [email protected]***** via EMAIL [eventimportance => High (1)]
[2016-01-27 11:32:47 -0500] info [tailwatchd] chkservd::Notify Notification => ***** via PUSHBULLET [eventimportance => High (1)]
Building global cache for cpanel...Done
[2016-01-27 11:45:13 -0500] info [tailwatchd] chkservd::Notify Notification => [email protected]***** via EMAIL [eventimportance => High (1)]
[2016-01-27 11:45:13 -0500] info [tailwatchd] chkservd::Notify Notification => ***** via PUSHBULLET [eventimportance => High (1)]

[2016-01-26 09:27:33 -0500] info [tailwatchd] chkservd::Notify Notification => [email protected]***** via EMAIL [eventimportance => High (1)]
[2016-01-26 09:27:33 -0500] info [tailwatchd] chkservd::Notify Notification => ***** via PUSHBULLET [eventimportance => High (1)]
[2016-01-26 09:40:01 -0500] info [tailwatchd] chkservd::Notify Notification => [email protected]***** via EMAIL [eventimportance => High (1)]
[2016-01-26 09:40:01 -0500] info [tailwatchd] chkservd::Notify Notification => ***** via PUSHBULLET [eventimportance => High (1)]
Building global cache for cpanel...Done

 

[cPanelMichael]

Hello

Please let us know if this thread is related:

'spamd' bottleneck after update

Thank you.

 

[coursevector]

I disabled the KAM rules per the thread suggestion. Will keep you posted if that helps or not. But any idea on the LogAccess errors?

 

[cPanelMichael]

But any idea on the LogAccess errors?

This is likely unrelated to the issue with SpamAssassin. Do the entries correspond with failed login attempts?

Thank you.

 

[coursevector]

SPAMD Failed again today, per the other suggestion in the thread I've disabled the cPanel ruleset and re-enabled KAM. Will see if it fails again tomorrow.

I checked the logs, but didn't see anything corresponding to logins during that time period.

 

[coursevector]

Since I've disabled the cPanel ruleset, SPAMD hasn't failed.

 

[cPanelMichael]

I am happy to see there are no additional failures. Thank you for updating us with the outcome.