### 1. processes in the plex container (docker top)
PID                 USER                ELAPSED             TIME                %CPU                COMMAND
1493203             root                04:25:08            00:00:00            0.0                 s6-svscan
1493262             root                04:25:08            00:00:00            0.0                 s6-supervise
1493541             root                04:25:08            00:00:00            0.0                 s6-supervise
1493544             1000                04:25:08            00:00:21            0.1                 Plex Media Serv
1493588             1000                04:25:08            00:00:15            0.0                 Plex Script Hos
1494146             1000                04:25:05            00:00:12            0.0                 Plex Tuner Serv
### 1b. suspect names anywhere in the guest
none
### 1c. top CPU processes in the guest
    PID USER     %CPU     ELAPSED COMMAND
    235 root      1.7  2-06:15:22 dockerd
    183 root      0.8  2-06:15:23 containerd
1493858 999       0.7    04:25:07 redis-server
1489649 999       0.6    04:25:33 redis-server
1492193 999       0.6    04:25:19 redis-server
1717354 root      0.3    02:26:14 felhom-controll
1496145 root      0.3    04:24:23 gunicorn
   1698 65532     0.3  2-06:15:16 cloudflared
1496141 root      0.3    04:24:23 gunicorn
1492308 1000      0.2    04:25:19 node-MainThread
1495252 1000      0.2    04:24:46 [celeryd: celer
### 2. ELF files under Codecs (path size mtime sha256)
all files under Codecs: 1
total 16
drwxr-xr-x  3 1000 1000 4096 2026-10-15 08:46:05.701113471 +0000 .
drwxr-xr-x 11 1000 1000 4096 2026-10-23 08:39:53.737639828 +0000 ..
-rw-r--r--  1 1000 1000   36 2026-10-15 08:46:05.701113471 +0000 .device-id
drwxr-xr-x  2 1000 1000 4096 2026-10-15 08:46:05.700807513 +0000 e613bce-97f23d579c1001d8e9cc0d2e-linux-x86_64
### 2b. any ELF in the config volume outside Plex's own folders, newer than 2026-10-15
(end 2b)
### 3. Preferences.xml transcoder attributes
TranscoderH264Options*: absent
attribute names present:
AcceptedEULA AnonymousMachineIdentifier CertificateUUID CertificateVersion DlnaEnabled FSEventLibraryPartialScanEnabled FSEventLibraryUpdatesEnabled GlobalMusicVideoPathMigrated LanguageInCloud LastAutomaticMappedPort MachineIdentifier MetricsEpoch OldestPreviousVersion PlexOnlineHome PlexOnlineMail PlexOnlineToken PlexOnlineUsername ProcessedMachineIdentifier PubSubServer PubSubServerPing PubSubServerRegion PublishServerOnPlexOnlineKey TranscoderTempDirectory customConnections encoding version 
### 4. log lines: searchOne / transcode/universal (tokens redacted)
total 940
drwxr-xr-x  3 1000 1000   4096 2026-10-23 04:39:29.306642337 +0000 .
drwxr-xr-x 11 1000 1000   4096 2026-10-23 08:39:53.737639828 +0000 ..
drwxr-xr-x  2 1000 1000   4096 2026-10-23 04:39:30.774964086 +0000 PMS Plugin Logs
-rw-r--r--  1 1000 1000    880 2026-10-23 04:38:23.878139505 +0000 Plex Crash Uploader.1.log
-rw-r--r--  1 1000 1000    561 2026-10-23 03:34:34.438792292 +0000 Plex Crash Uploader.2.log
-rw-r--r--  1 1000 1000    880 2026-10-23 03:33:23.603543601 +0000 Plex Crash Uploader.3.log
-rw-r--r--  1 1000 1000    561 2026-10-23 02:59:31.142955018 +0000 Plex Crash Uploader.4.log
-rw-r--r--  1 1000 1000    880 2026-10-23 02:58:23.855206791 +0000 Plex Crash Uploader.5.log
-rw-r--r--  1 1000 1000    561 2026-10-23 04:39:28.559376452 +0000 Plex Crash Uploader.log
-rw-r--r--  1 1000 1000 122590 2026-10-23 04:38:23.956828290 +0000 Plex Media Server.1.log
-rw-r--r--  1 1000 1000  95344 2026-10-23 03:33:23.650544218 +0000 Plex Media Server.2.log
-rw-r--r--  1 1000 1000  97012 2026-10-23 02:58:23.959207947 +0000 Plex Media Server.3.log
-rw-r--r--  1 1000 1000  96861 2026-10-23 02:38:23.762270724 +0000 Plex Media Server.4.log
-rw-r--r--  1 1000 1000 157007 2026-10-23 02:16:45.904202135 +0000 Plex Media Server.5.log
-rw-r--r--  1 1000 1000 311157 2026-10-23 09:04:06.104368626 +0000 Plex Media Server.log
-rw-r--r--  1 1000 1000   2769 2026-10-23 04:38:23.939140257 +0000 Plex Tuner Service.1.log
-rw-r--r--  1 1000 1000   2769 2026-10-23 03:33:23.635544021 +0000 Plex Tuner Service.2.log
-rw-r--r--  1 1000 1000   2769 2026-10-23 02:58:23.938207713 +0000 Plex Tuner Service.3.log
-rw-r--r--  1 1000 1000   2769 2026-10-23 02:38:23.745270485 +0000 Plex Tuner Service.4.log
-rw-r--r--  1 1000 1000   2769 2026-10-23 02:16:45.852201461 +0000 Plex Tuner Service.5.log
-rw-r--r--  1 1000 1000   1855 2026-10-23 04:39:39.105066764 +0000 Plex Tuner Service.log
count searchOne: 0
count transcode/universal: 0
count lines with http(s):// in a query: 0
oldest log line: Oct 23, 2026 02:32:13.754 [1343875524390
