For some time now our Rspamd filter goes to 100% By restarting this service it works fine for some time. docker-compose restart rspamd-mailcow But the question is how can we find the cause? I can log in to the container docker-compose exec rspamd-mailcow bash. But I can’t find any clear information in /var/log docker-compose logs –tail=10 rspamd-mailcow only gives the status of the spam mail filter. Does anyone know where and or which log files and or dmesg messages
EnglishFor some time now our Rspamd filter goes to 100%
Are the mailcow 
minimum requirements met? docs.mailcow.email
Have something to say?
Join the community by quickly registering to participate in this discussion. We'd like to see you joining our great moo-community!
- Edited
We have 12GB RAM 4 core CPU and 300 GB disk space. 30 active users. Seems we met the minimum criteria. Firewall have been set. This system is already running for some years.
But i would think, some log file should register an error if there is an problem or ? Whole system locks if CPU goes 100%
- Edited
mail-in-abox or some time now our Rspamd filter goes to 100%
100% of what? CPU? Memory? Diskspace ? I/O?
try top to find out the exact process causing it.
esackbauer CPU
CPU on which process?
esackbauer rspamd-mailcow
that is not a process name. Its a container name. Can it be that you are a Linux noob?
esackbauer I know thats a container .. when you read the first line of this message you could see that i did know this. Still the question Why is this “process name” a container go 100% i already did login to the container to check the log files inside this virtual. The container runs the rspamd ..
Guess what, rspamd creates a lot of processes for different tasks. With the exact process you could pinpoint the problem.
But it seems you do not really need my help 
You bring me closer to the diagnosis. The command e.g. docker top <container_id> -eo pid,cmd will give more insight. The way of thinking should be more on how to diagnose the container and which tools commands are available for this. So my approach should be different. Then I will probably find the right direction :-)
No one is typing