High CPU Utilization - Cpanellogd

[epr02]

Running the latest release of cpanel on a celery server with only a couple of domains. After updating to the latest release we noticed the CPU utilization went WAY up.

We trend resource using MRTG and have noticed the the CPU is shooting way up.

The resource hog is cpanellogd as we have witnessed

[email protected] [~]# top

10:04:27 up 1 min, 1 user, load average: 3.09, 1.25, 0.46
117 processes: 113 sleeping, 3 running, 1 zombie, 0 stopped
CPU states: cpu user nice system irq softirq iowait idle
total 0.0% 23.7% 29.5% 1.1% 0.0% 45.5% 0.0%
Mem: 1026988k av, 466136k used, 560852k free, 0k shrd, 47008k buff
286812k active, 13660k inactive
Swap: 2040212k av, 0k used, 2040212k free 68656k cached

PID USER PRI NI SIZE RSS SHARE STAT %CPU %MEM TIME CPU COMMAND
4368 root 39 19 20684 20M 1728 R N 53.0 2.0 0:20 0 cpanellogd
4384 root 15 0 1112 1112 848 R 0.1 0.1 0:00 0 top
1 root 15 0 548 548 476 S 0.0 0.0 0:04 0 init
2 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 keventd
3 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kapmd
4 root 34 19 0 0 0 SWN 0.0 0.0 0:00 0 ksoftirqd/0
7 root 25 0 0 0 0 SW 0.0 0.0 0:00 0 bdflush
5 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kswapd
6 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kscand
8 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kupdated
9 root 25 0 0 0 0 SW 0.0 0.0 0:00 0 mdrecoveryd
17 root 25 0 0 0 0 SW 0.0 0.0 0:00 0 scsi_eh_0
18 root 25 0 0 0 0 SW 0.0 0.0 0:00 0 scsi_eh_1
21 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kjournald
109 root 25 0 0 0 0 SW 0.0 0.0 0:00 0 khubd
473 root 25 0 0 0 0 SW 0.0 0.0 0:00 0 kjournald
474 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kjournald
476 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 loop0
477 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kjournald
478 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kjournald
479 root 15 0 0 0 0 SW 0.0 0.0 0:00 0 kjournald
1059 root 15 0 612 612 520 S 0.0 0.0 0:00 0 syslogd
1063 root 15 0 508 508 436 S 0.0 0.0 0:00 0 klogd
1134 nobody 15 0 2224 2224 1596 S 0.0 0.2 0:00 0 proftpd
3399 root 15 0 1504 1504 1260 S 0.0 0.1 0:00 0 sshd
3412 root 15 0 876 876 744 S 0.0 0.0 0:00 0 xinetd
3430 root 18 0 2688 2688 1392 S 0.0 0.2 0:00 0 chkservd
3483 mailnull 15 0 1844 1844 1500 S 0.0 0.1 0:00 0 exim
3487 mailnull 25 0 1816 1816 1484 S 0.0 0.1 0:00 0 exim
3490 root 25 0 1832 1832 1504 S 0.0 0.1 0:00 0 exim
3494 root 15 0 1456 1456 1176 S 0.0 0.1 0:00 0 antirelayd
3542 root 15 0 4284 4284 3140 S 0.0 0.4 0:00 0 httpd
3590 nobody 23 0 4288 4288 3148 S 0.0 0.4 0:00 0 httpd
3591 nobody 23 0 4288 4288 3148 S 0.0 0.4 0:00 0 httpd
3592 nobody 23 0 4288 4288 3148 S 0.0 0.4 0:00 0 httpd

So, went over to forums.cpanel.net and not seeing any others having this issue recently and did a search and really came up with no solution.

Can anyone here suggest a solution for this issue???

Thanks...

 

[chirpy]

You should check the size of your logs in /etc/httpd/domlogs and see if any are getting ridiculously large for a single days usage (i.e. several 100MB in size). Log file processing will always hammer CPU and disk I/O by its very nature. You should also check if it's only a specific site and either clear down that sites logs incase something in them is causing a loop and/or check it's not being DOS'ed.