Weird email from root about dovecot_solr_commit

[Jonza]

Hello,

I have had my first VPS with WHM/cPanel for 2 years now and recently I had to downgrade to slightly older LTS version because the old CentOS version refused to update WHM/cPanel to newer version and I kept getting emails about it daily.

Now about a week after that downgrade of version I got this weird email from the root email and was wondering if something went wrong with that downgrade or security of LTS isn't up to date and someone accidentally triggered this email when accessing my server without permission or logon (no notifications of logins using configserver firewall).

The email title was Cron <[email protected]> /usr/bin/test -e /etc/cpanel-dovecot-solrdisable || /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit

and body was

Cpanel::Exception::HTTP::Network/(XID 8g89sx) The system failed to send an <abbr title="Hypertext Transfer Protocol">HTTP</abbr> “GET” request to “http://1h4n0qksRwM1i16N:[email protected]:8984/solr/dovecot/update?commit=true” because of an error: Could not connect to '127.0.0.1:8984': Connection timed out
at /usr/local/cpanel/Cpanel/HTTP/Client.pm line 115.
Cpanel::HTTP::Client::request(Cpanel::HTTP::Client=HASH(0x1bbcf98), "GET", "[http://1h4n0qksRwM1i16N:__CPANEL_URLPW_HIDDEN__\@127.0.0.1:8984/solr/]http://1h4n0qksRwM1i16N:__CPANEL_URLPW_HIDDEN__\@127.0.0.1:8984/solr/"..., HASH(0x1e78190)) called at (eval 3) line 6
HTTP::Tiny::get(Cpanel::HTTP::Client=HASH(0x1bbcf98), "[http://1h4n0qksRwM1i16N:__CPANEL_URLPW_HIDDEN__\@127.0.0.1:8984/solr/"...]http://1h4n0qksRwM1i16N:__CPANEL_URLPW_HIDDEN__\@127.0.0.1:8984/solr/"...) called at /var/cpanel/perl/Cpanel/Dovecot/Solr/Utils.pm line 129
Cpanel::Dovecot::Solr::Utils::call_commit() called at /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit line 40
scripts::cpanel_dovecot_solr_commit::run("scripts::cpanel_dovecot_solr_commit") called at /usr/local/cpanel/3rdparty/scripts/cpanel_dovecot_solr_commit line 35

Anyone know what triggered this and why I got it in the first place?
cpanel-dovecot-solr service also crashed at the same time I got this email along with clamd.

 

[cPanelLauren]

Hello,

There is a blocker for CentOS 6 moving to v88 but the LTS version v86 isn't actually very old, it's a new LTS that will be good for a year and receive security updates.

This message indicates that dovecot solr can't connect over port 8984 which means that either solr wasn't listening on that port some reason or it started but couldn't connect to that port

Is solr running currently? You can check this at WHM>>Server Status>>Service Status

 

[Jonza]

Yes, it is up and running right now.

So this is just not so user friendly warning of a connection failure.

Like I mentioned on my previous post above solr crashed with clamd and those crashes have become very normal to my VPS lately, at least for the past year. So the error is probably due to the service crashing while executing routine functions and couldn't finish what it was doing.

I don't need help for the crashes because I need to switch servers soon anyway because of the old OS that I am running and newer VPS plans from the same provider are by default more powerful than older ones.

This clears my issue and confusion about the email that the root automatically emailed me. Thank you for your reply.

 

[SamuelM]

I'm glad to see Lauren was able to explain the issue for you.

At this point it might not be worth your while to review further since you plan to migrate to a new server soon. But in case you had any interest in determining why the Dovecot Solr process failed, I wanted to make sure you know that you can find the logs in the following path:

/home/cpanelsolr/server/logs

Best regards