The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Very large /usr/local/cpanel/logs/access_log files

Discussion in 'General Discussion' started by Spork Schivago, Feb 15, 2016.

  1. Spork Schivago

    Spork Schivago Well-Known Member

    Joined:
    Jan 21, 2016
    Messages:
    269
    Likes Received:
    20
    Trophy Points:
    18
    Location:
    corning, ny
    cPanel Access Level:
    Website Owner
    Hello,

    I've noticed that I'm getting really large /usr/local/cpanel/logs/access_log files. The logs get rotated daily. Yesterday, when I checked, the log was over 45MB! I cat out the log file and see a bunch of stuff like this:
    Code:
    127.0.0.1 - - [02/15/2016:07:01:20 -0000] "GET / HTTP/1.0" 401 0 "" "Cpanel::HttpRequest/2.1" "-" "-" 2086
    127.0.0.1 - - [02/15/2016:07:01:20 -0000] "GET / HTTP/1.0" 401 0 "" "Cpanel::HttpRequest/2.1" "-" "-" 2086
    127.0.0.1 - - [02/15/2016:07:01:20 -0000] "GET / HTTP/1.0" 401 0 "" "Cpanel::HttpRequest/2.1" "-" "-" 2086
    127.0.0.1 - - [02/15/2016:07:01:20 -0000] "GET / HTTP/1.0" 401 0 "" "Cpanel::HttpRequest/2.1" "-" "-" 2086
    127.0.0.1 - - [02/15/2016:07:01:20 -0000] "GET / HTTP/1.0" 401 0 "" "Cpanel::HttpRequest/2.1" "-" "-" 2086
    127.0.0.1 - - [02/15/2016:07:01:33 -0000] "GET /.__cpanel__service__check__./serviceauth?sendkey=__HIDDEN__&version=1.2 HTTP/1.0" 20                0 0 "" "-" "-" "-" 2086
    127.0.0.1 - - [02/15/2016:07:06:32 -0000] "GET /.__cpanel__service__check__./serviceauth?sendkey=__HIDDEN__&version=1.2 HTTP/1.0" 20                0 0 "" "-" "-" "-" 2086
    127.0.0.1 - - [02/15/2016:07:11:33 -0000] "GET /.__cpanel__service__check__./serviceauth?sendkey=__HIDDEN__&version=1.2 HTTP/1.0" 20                0 0 "" "-" "-" "-" 2086
    
    There's also logs for other IP addresses but the most seem to be from the loopback IP. Is this normal and is there a way to figure out what exactly is going on? It makes it very hard to see who's trying to access my cPanel stuff with all these reports. Any help would be greatly appreciated.
     
  2. Spork Schivago

    Spork Schivago Well-Known Member

    Joined:
    Jan 21, 2016
    Messages:
    269
    Likes Received:
    20
    Trophy Points:
    18
    Location:
    corning, ny
    cPanel Access Level:
    Website Owner
    Actually, it looks like they're not getting properly rotated either. I see stuff back from 1/19/2016.
     
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,688
    Likes Received:
    654
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
    Hello :)

    I'm not sure everyone would classify 45M as a large log file. You can change the log rotation size threshold via the following option under the "Stats and Logs" tab in "WHM >> Tweak Settings":

    "Log rotation size threshold"

    The default is 300M.

    Thank you.
     
  4. Spork Schivago

    Spork Schivago Well-Known Member

    Joined:
    Jan 21, 2016
    Messages:
    269
    Likes Received:
    20
    Trophy Points:
    18
    Location:
    corning, ny
    cPanel Access Level:
    Website Owner
    Oh wow, 300MB? Okay! To me, I thought something was definitely wrong! Do you know what all those
    Code:
    127.0.0.1 - - [02/15/2016:07:01:20 -0000] "GET / HTTP/1.0" 401 0 "" "Cpanel::HttpRequest/2.1" "-" "-" 2086
    
    and
    Code:
    127.0.0.1 - - [02/15/2016:07:01:33 -0000] "GET /.__cpanel__service__check__./serviceauth?sendkey=__HIDDEN__&version=1.2 HTTP/1.0" 20                0 0 "" "-" "-" "-" 2086 
    are about? Thanks!
     
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    30,688
    Likes Received:
    654
    Trophy Points:
    113
    cPanel Access Level:
    Root Administrator
  6. Spork Schivago

    Spork Schivago Well-Known Member

    Joined:
    Jan 21, 2016
    Messages:
    269
    Likes Received:
    20
    Trophy Points:
    18
    Location:
    corning, ny
    cPanel Access Level:
    Website Owner
    Gotcha. Thank you!
     
Loading...

Share This Page