For some time now our Rspamd filter goes to 100%

mail-in-abox

For some time now our Rspamd filter goes to 100% By restarting this service it works fine for some time. docker-compose restart rspamd-mailcow But the question is how can we find the cause? I can log in to the container docker-compose exec rspamd-mailcow bash. But I can’t find any clear information in /var/log docker-compose logs –tail=10 rspamd-mailcow only gives the status of the spam mail filter. Does anyone know where and or which log files and or dmesg messages

esackbauer

mail-in-abox or some time now our Rspamd filter goes to 100%

100% of what? CPU? Memory? Diskspace ? I/O?
try top to find out the exact process causing it.

DocFraggle

Are the mailcow minimum requirements met?

mail-in-abox

We have 12GB RAM 4 core CPU and 300 GB disk space. 30 active users. Seems we met the minimum criteria. Firewall have been set. This system is already running for some years.

But i would think, some log file should register an error if there is an problem or ? Whole system locks if CPU goes 100%

mail-in-abox

esackbauer CPU

esackbauer

CPU on which process?

mail-in-abox

esackbauer rspamd-mailcow

esackbauer

that is not a process name. Its a container name. Can it be that you are a Linux noob?

mail-in-abox

esackbauer I know thats a container .. when you read the first line of this message you could see that i did know this. Still the question Why is this “process name” a container go 100% i already did login to the container to check the log files inside this virtual. The container runs the rspamd ..

esackbauer

Guess what, rspamd creates a lot of processes for different tasks. With the exact process you could pinpoint the problem.
But it seems you do not really need my help 😉

mail-in-abox

You bring me closer to the diagnosis. The command e.g. docker top <container_id> -eo pid,cmd will give more insight. The way of thinking should be more on how to diagnose the container and which tools commands are available for this. So my approach should be different. Then I will probably find the right direction :-)