Skip to main content

whm-360-monitoring

eitanc

Hello,

Today I woke up to an email from my installation of:

"

The application “whm-360-monitoring” has registered with AppConfig for the service: whostmgr 
 
Name: whm-360-monitoring 
Service: whostmgr 
Server: <my server's fqdn>
ACLs required: any 
System User: root 
URL: /cgi/monitoring/whm-360-monitoring.cgi 
Display Name: Server Monitoring 
Entry URL: monitoring/whm-360-monitoring.cgi 

"

While I didn't anything on the server... - is it something cpanel did on its own?

Comments

8 comments

Date Votes
  • quietFinn

    https://docs.cpanel.net/whm/plugins/server-monitoring/

     

    0
  • eitanc

    Thanks, even if it is this - how was it enabled without me enabling it?

    0
  • William Del Piero cPanel Staff

    Hi,

     

    Server Monitoring is a new feature of WHM/cPanel. It may have been automatically installed after a nightly cPanel update, or it could have been enabled recently by your license provider. Our team is working on creating an option in WHM to manually disable 360 monitoring, but you can currently disable it from the command line with the following command:

     

    /var/cpanel/plugins/monitoring-agent/disable.sh
    0
  • eitanc

    Hi William,

    Thank you for your detailed reply.

    I use the solo version, so I control whm and cpanel end to end, no one else changes things.

    cPanel should enhance its QA, to avoid such auto enabling a plugin without the user's pre-consent This is alarming to suspect of a possible breach.

    Consider publishing a support post about this behavior, I will not be the only one hit by this.

    0
  • Earl Grey
    • Edited

    It looks good BUT:

    1. I'm not a fan of having extra plugins on a server and having NO say in it
    2. What extra resource usage does this place on the server?
    3. Does having a 360 account increase resource usage?

    0
  • cPRex Jurassic Moderator

    eitanc - this isn't a QA issue, as we intended this product to be activated on the server.  We are adding a tool that will let you remove this completely in the future.

    Earl Grey

    1 - See above - there will soon be a tool to let me remove this if you'd like
    2 - It's hard to say - you can look for the "agent360" process on your machine to see if that is causing an impact.  On the machines where I've seen it run, it's typically less than 2% CPU.
    3 - No, this wouldn't change anything.

    0
  • Earl Grey

    cPRex

    The correct way is to give people the option to add, not the option to delete. Any system should be as clean as possible and if Sys Admins want to add more, then that's their decision.

    Adding something that takes server resources without the Sys Admins authorisation is irresponsible. Add 10 things that "only" take 5% CPU and you've used 50% of a systems resources. Add 10 things and "oops, 1 of them has a security hole".

    From both a resources and security point of view, the decision should always reside with the Sys Admin to add, not for software manufacturers to allow deletion.

    0
  • cPRex Jurassic Moderator

    I don't disagree :D

    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post