TailWatch in WHM
TailWatch monitors a log file for certain activities, and then takes action based upon the activity. Driver modules monitor specific services and contain instructions for which actions to perform (for example, which log to monitor and what to do with the information).
As of cPanel & WHM version 56, we ship the following stock drivers:
In cPanel & WHM version 11.52, we removed the
antirelayd driver and added the
You can enable or disable TailWatch drivers in WHM’s Service Manager interface (Home >> Service Configuration >> Service Manager).
The chkservd driver
chkservd driver determines whether a process is online and whether to restart it. By default, the
chkservd driver checks each service every five minutes to determine whether the server is online.
- If a service is online, the
chkservddriver will move on to the next service.
- If a service is offline, the
chkservddriver will use one of the cPanel restart scripts, located at
/scripts/restartsrv_*, to attempt to restart the service.
You can view the results of the
chkservd checks in any of the following formats:
/var/log/chkservd.loglog file contains the results from each check that it performs.
- WHM’s Server Information interface (Home >> Server Status >> Server Information) displays the results from each check.
- You can choose to have the results from each check emailed to you.
- To choose which services the
chkservddriver will monitor, use WHM’s Service Manager interface (Home >> Service Configuration >> Service Manager).
- To modify the
chkservddriver’s configuration options, use the System section of WHM’s Tweak Settings interface (Home >> Server Configuration>> Tweak Settings).
One of the most common
chkservd driver issues occurs when you do not monitor and have not disabled a service, but it continues to appear as offline in the Service Manager interface (Home >> Service Configuration >> Service Manager). To fix this error, you may need to remove or edit certain files.
To fix this error, perform the following steps, where
service is the name of the service with which you experience problems:
- To remove the run file, run the following command:
- To remove the
chkservdconfiguration file, run the following command:
- In your preferred text editor, remove the service’s line from the
- To restart the
chkservddriver, run the following command:
- Navigate to WHM’s Service Manager interface (Home >> Service Configuration >> Service Manager).
- Click Save at the bottom of the interface without any additional changes.
Other drivers (antirelayd, eximstats, jailmanager, cpbandwd, and modseclog)
chkservd driver, the other TailWatch drivers do not have their own log files or configuration.
The system writes activity by these drivers to the main
/usr/local/cpanel/logs/tailwatchd_log log file.
Process control and status
To control the TailWatch process, pass command line flags to the
For a full list of available flags, run the following command:
To add custom functionality to TailWatch, add a new driver. The PerlDoc for the TailWatch Module contains full documentation and examples for customizations.
To access this documentation, run the following command:
Place your new drivers in the
/usr/local/cpanel/Cpanel/TailWatch directory, then restart TailWatch to load the new drivers.