scanned multiple times, ignore?

[maknet]

I'm getting a few log entries like this:

Sep 15 12:40:38 www cxswatch[9665]: WARNING: '/home/user/public_html/error_log' scanned 6 times in the last 30 seconds, you might want to ignore this resource

Any ideas what might cause this, or whether ignoring:
hfile:/public_html/error_log

is advisable for all? (Does cxs scan the log file?)

Thanks.

[Sarah]

Since it is a log file that is being updated frequently, cxs scans it every time it is updated. If you don't want cxs to scan log files every time they are updated then you should configure it to ignore them, either in all accounts or specific accounts. This may be more of an issue if server performance is being affected by the frequent cxs scanning. If it's not causing any issue and you don't want to risk ignoring every file called "error_log", then you can just leave it alone.

Regards,
Sarah

[Cont]

Hi,

1. as i understand,log file is just log,is it possible hacker insert code into the log file to hack the site? if not,will ignore scaning the log files not good ?

2. how can i set my cxs ignore scaning the log ? because i can not find the option from whm>> cxs.

[maknet]

Yes, i don't believe the log file can be hacked directly. And even so, that wouldn't do anything. But it does indicate a larger problem.

As i recall, it's command line like /etc/cxs/cxs.ignore.

[Cont]

Hi,

1. do you mean you add the following on /etc/cxs/cxs.ignore ? after modifying,should i restart cxs ?
---------------------
file: log
---------------------

2. will it only apply for cxswatch ? or also Scanner ?

[maknet]

I'm not actually sure about the specifics, I'm just a beginner myself.

[hrace009]

I have question, will it safe to ignore log file?