cryptic logs

[jeffschips]

Hello. I hope everyone is safe and healthy.

I am seeing the following notices and don't have a clue what they mean. Any guidance greatly appreciated.


lfd on xxxxxxxx.com: Excessive processes running under userxxxxxx

Time: Wed Mar 15 08:11:31 2023 -0400
Account: xxxxxxxxx
Process Count: 11 (Not killed)

Process Information:

User:xxxxxxxxx PID:5016 PPID:4808 Run Time:38(secs) Memory:200336(kb) RSS:34516(kb) exe:/usr/local/cpanel/libexec/cpanellogd cmd:cpanellogd - http logs for xxxxxxxxx
User:xxxxxxxxx PID:5302 PPID:5301 Run Time:18(secs) Memory:149984(kb) RSS:2560(kb) exe:/usr/local/cpanel/3rdparty/webalizer/bin/english cmd:/usr/local/cpanel/3rdparty/webalizer/bin/english -N 10 -D /home/xxxxxxxxx/tmp/webalizer/xxxxxxxxx.com/dns_cache.db -R 250 -p -n xxxxxxxxx.com -o /home/xxxxxxxxx/tmp/webalizer/xxxxxxxxx.com /etc/apache2/logs/domlogs/xxxxxxxxx.com.bkup
User:xxxxxxxxx PID:5303 PPID:5302 Run Time:18(secs) Memory:150196(kb) RSS:1040(kb) exe:/usr/local/cpanel/3rdparty/webalizer/bin/english cmd:/usr/local/cpanel/3rdparty/webalizer/bin/english -N 10 -D /home/xxxxxxxxx/tmp/webalizer/xxxxxxxxx.com/dns_cache.db -R 250 -p -n xxxxxxxxx.com -o /home/xxxxxxxxx/tmp/webalizer/xxxxxxxxx.com /etc/apache2/logs/domlogs/xxxxxxxxx.com.bkup
User:xxxxxxxxx PID:5304 PPID:5302 Run Time:18(secs) Memory:150196(kb) RSS:1028(kb) exe:/usr/local/cpanel/3rdparty/webalizer/bin/english cmd:/usr/local/cpanel/3rdparty/webalizer/bin/english -N 10 -D /home/xxxxxxxxx/tmp/webalizer/xxxxxxxxx.com/dns_cache.db -R 250 -p -n xxxxxxxxx.com -o /home/xxxxxxxxx/tmp/webalizer/xxxxxxxxx.com /etc/apache2/logs/domlogs/xxxxxxxxx.com.bkup
User:xxxxxxxxx PID:5305 PPID:5302 Run Time:18(secs) Memory:150196(kb) RSS:1028(kb) exe:/usr/local/cpanel/3rdparty/webalizer/bin/english cmd:/usr/local/cpanel/3rdparty/webalizer/bin/english -N 10 -D /home/xxxxxxxxx/tmp/webalizer/xxxxxxxxx.com/dns_cache.db -R 250 -p -n xxxxxxxxx.com -o /home/xxxxxxxxx/tmp/webalizer/xxxxxxxxx.com /etc/apache2/logs/domlogs/xxxxxxxxx.com.bkup

 

[cPRex]

Hey there! It's important to note that cPanel doesn't provide or distribute the CSF/LFD software.

This is letting you know that the logs for user xxxxxxx have been running for a while and using enough CPU to trigger the alert from CSF.

 

[quietFinn]

Those messages are also quite normal and harmless.
EDIT:
Maybe good to add that they are harmless because they are processes generating logs for that particular user.

 

[jeffschips]

SOLVED:
Correct me if I"m wroing, but all of these are apparently the webilizer running - that's the service that produces varies types of visual logs. I disabled it.

 

[ffeingol]

What this is actually tell you is that there are more than 10 processes running for this cPanel user. It's controlled by the PT_USERPROC setting and it defaults to 10. It basically means that at the instant the check ran (every 60 second by default) there were 11 processes running and the limit was 10, so it warned you. Going over the count once in a while is prob. not a big deal, but if a cPanel account is constantly over your limit, you may want to look at what that account is using.

 

[jeffschips]

Ah. ok thank you.