Skip to main content

Very large /usr/local/cpanel/logs/access_log files

Spork Schivago
Hello, I've noticed that I'm getting really large /usr/local/cpanel/logs/access_log files. The logs get rotated daily. Yesterday, when I checked, the log was over 45MB! I cat out the log file and see a bunch of stuff like this:
127.0.0.1 - - [02/15/2016:07:01:20 -0000] "GET / HTTP/1.0" 401 0 "" "Cpanel::HttpRequest/2.1" "-" "-" 2086 127.0.0.1 - - [02/15/2016:07:01:20 -0000] "GET / HTTP/1.0" 401 0 "" "Cpanel::HttpRequest/2.1" "-" "-" 2086 127.0.0.1 - - [02/15/2016:07:01:20 -0000] "GET / HTTP/1.0" 401 0 "" "Cpanel::HttpRequest/2.1" "-" "-" 2086 127.0.0.1 - - [02/15/2016:07:01:20 -0000] "GET / HTTP/1.0" 401 0 "" "Cpanel::HttpRequest/2.1" "-" "-" 2086 127.0.0.1 - - [02/15/2016:07:01:20 -0000] "GET / HTTP/1.0" 401 0 "" "Cpanel::HttpRequest/2.1" "-" "-" 2086 127.0.0.1 - - [02/15/2016:07:01:33 -0000] "GET /.__cpanel__service__check__./serviceauth?sendkey=__HIDDEN__&version=1.2 HTTP/1.0" 20 0 0 "" "-" "-" "-" 2086 127.0.0.1 - - [02/15/2016:07:06:32 -0000] "GET /.__cpanel__service__check__./serviceauth?sendkey=__HIDDEN__&version=1.2 HTTP/1.0" 20 0 0 "" "-" "-" "-" 2086 127.0.0.1 - - [02/15/2016:07:11:33 -0000] "GET /.__cpanel__service__check__./serviceauth?sendkey=__HIDDEN__&version=1.2 HTTP/1.0" 20 0 0 "" "-" "-" "-" 2086
There's also logs for other IP addresses but the most seem to be from the loopback IP. Is this normal and is there a way to figure out what exactly is going on? It makes it very hard to see who's trying to access my cPanel stuff with all these reports. Any help would be greatly appreciated.

Comments

5 comments

Date Votes
  • Spork Schivago
    Actually, it looks like they're not getting properly rotated either. I see stuff back from 1/19/2016.
    0
  • cPanelMichael
    Yesterday, when I checked, the log was over 45MB!

    Hello :) I'm not sure everyone would classify 45M as a large log file. You can change the log rotation size threshold via the following option under the "Stats and Logs" tab in "WHM >> Tweak Settings": "Log rotation size threshold" The default is 300M. Thank you.
    0
  • Spork Schivago
    Oh wow, 300MB? Okay! To me, I thought something was definitely wrong! Do you know what all those
    127.0.0.1 - - [02/15/2016:07:01:20 -0000] "GET / HTTP/1.0" 401 0 "" "Cpanel::HttpRequest/2.1" "-" "-" 2086
    and
    127.0.0.1 - - [02/15/2016:07:01:33 -0000] "GET /.__cpanel__service__check__./serviceauth?sendkey=__HIDDEN__&version=1.2 HTTP/1.0" 20 0 0 "" "-" "-" "-" 2086
    are about? Thanks!
    0
  • cPanelMichael
    The service check entries stem from Chkservd. It's checking to make sure the service is running: Service Manager - Documentation - cPanel Documentation Thank you.
    0
  • Spork Schivago
    Gotcha. Thank you!
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post