Upgraded to 2025, What is this netflix sentiment analyzer in the coldfusion-out.log

[default8rs3k49y1nan]

Just upgraded to CF2025 and am seeing this below in the coldfusion-out.log file at random times but almost every minute or more. What is it and what would it be doing.  The only thing i could find with "sentiment" in the file name was this..."\\cfusion\jetty\work\jetty-127_0_0_1-8997-solr_war-_solr-any-\webapp\WEB-INF\lib\sentiment-analysis-parser-0.1.jar". I did google the url in the coldfusion-out.log below and found the github repo for it but dumbfounded why it is showing up in our coldfusion instance. 

Oct 13, 2025 13:51:24 INFO [ajp-nio-127.0.0.1-8024-exec-13] - Sentiment Model is at https://raw.githubusercontent.com/USCDataScience/SentimentAnalysisParser/master/sentiment-models/src...
Oct 13, 2025 13:51:24 PM Information [ajp-nio-127.0.0.1-8024-exec-13] - Sentiment Model is at https://raw.githubusercontent.com/USCDataScience/SentimentAnalysisParser/master/sentiment-models/src...
Oct 13, 2025 13:52:02 INFO [ajp-nio-127.0.0.1-8024-exec-18] - Sentiment Model is at https://raw.githubusercontent.com/USCDataScience/SentimentAnalysisParser/master/sentiment-models/src...
Oct 13, 2025 13:52:02 PM Information [ajp-nio-127.0.0.1-8024-exec-18] - Sentiment Model is at https://raw.githubusercontent.com/USCDataScience/SentimentAnalysisParser/master/sentiment-models/src...

[Charlie Arehart]

Must be some Adobe spyware! Just kidding (though some would assert that must be it)!

First, I can say that I've never seen that in thousands of coldfusion-out.log files I've seen, and hundreds for cf2025. As such, this seems very unique to you...and thus is likely environmental. I can also confirm that I have that same sentiment-analysis-parser-0.1.jar file within my CF2025 jetty\work folder at about the same path, since I'd implemented the Solr feature of CF. But again I am seeing no such LOG entry as you report.

Let's note about that the info message that the thread-id indicates it arose based on a request coming into CF--specifically coming on your port 8024, which is the AJP port. That means the request came into CF by way of your web server, such as iis or apache (as opposed to the port 8500 which is the built-in web server used for the CF admin).

Even so, and especially since the request seems recurrent, you might want to check if perhaps you have a cf admin scheduled task running at that frequency (it could call a URL which ends up on your server, coming through your web server)? Please do check your admin scheduled tasks page. 

And I realize you you say you "just" installed this cf instance, in which case you might be tempted to say you "didn't add any tasks". Even so, you technically say you "upgraded" cf, which implies you had a prior cf version on the same machine. Is that right?  

If so, during the first launch of the cf admin you (or someone) would have been asked if you wanted to migrate in the cf admin settings from the previous version. If you did that, perhaps something got migrated you're not expecting. Note there is a migration log in the cfusion/logs folder if you did that, showing what was migrated. It might be worth a look.

Finally, since the requests are coming in via your web server, check your IIS or Apache logs for the times shown. That will show the URL as well as the originating IP address (and user agent). Let us know what you find.

[pete_freitag]

From what I can tell, this is part of Apache Tika - a java library which extracts meta data out of various file formats (PDF, XLS, etc).

Upon initialization it tries to pull in a model file so that it can classify documents based on sentiment. https://github.com/apache/tika/blob/b409ff65abdb4d364db66be39be35513abf89b54/tika-parsers/src/main/j...

Pete Freitag

Foundeo Inc.

[default8rs3k49y1nan]

Thanks everyone for the replys. It was a fresh install not a migration/upgrade. Nothing was lining up time wise with a process executed by the scheduler. 

Charlie, I took your suggestion and went through the IIS logs and found a time linkage to an applicaiton that is very minimal and is retreiving an blob image from database  then doing a <cfimage action="resize" source="#db.blob#"> on it.  I went to my test system and removed everything but the db call to get the blob and then the cfimage resize on the blob db variable, ran that and sure enough the sentiment record showed up in the coldfusion-out.log.  Tried a few different <cfimage> action types on the blob and they all generated that sentiment record in the log file. I then tried the <cfimage action="writeToBrowser"> on a .jpeg in the same directory and it did NOT generate the sentiment record in the log file. 

So I guess this is being generated by the <cfimage> tag call on a blob as the  source. I would be interested to see if anyone else could recreate this so that i know i am not just "special" 🙂

I went back and looked at the logs on my CF2021 instance and i don't see this in the logs anywhere so it is something new beyond CF2021. 

[Charlie Arehart]

Glad you're making progress, and especially glad my hints helped. But no, I would be SHOCKED both that this is some new behavior in cfimage or indeed that it's really related to cfimage at all.

I realize your use of the writetobrowser action seems to prove it "must be", since that "stops it". But I will press on.

First, try putting a cfabort after the cfimage, and try the other types again. Do you still get the message in the logs?

Second, try creating a single line standalone test doing that cfimage (which seems to create the message), and confirm it does.

Now, move that test file into a new test folder under where it is now. In that folder also create an empty application.cfc (or cfm). Now call it (in that test folder). Does it still happen? If not, there's more to your request than you were seeing and inferring (and this would prove it's NOT about cfimage). Then you can pursue what IS done in the application.cfc or application.cfm/on requestend. cfm which may be causing your message. 

Finally I'll note I'm writing from a phone so can't just do a test for you (and of course we can't see the cf logs in cffiddle.org or trycf.com).  But this is a couple minutes of effort for you, it seems. Hope you'll try it and report back. 

[default8rs3k49y1nan]

All the cfimage calls i make with all the different actions that are using a database BLOB as the source are creating the log record. That is also with or without a cfabort after the cfimage tag. 

When i use just a plain .jpeg as the source in those cfimage calls with all the different action types, it does not generate the log entry. The test for this only had that one line cfimage call.

I can't really test the database blob source cfimage call since i need to retrieve the blob from the db. But i did test this with just the cfquery to the database to get the blob with no cfimage and it did not create the log entry.  

I tried the new test folder in that original directory and the empty applicaiton.cfm and had the same results as above. Working with the blob as the source created the log entry and just plain .jpeg image as the source did not create the log entry. 

So it is only creating the log entry when i use a database blob as the source for cfimage, no matter the action type. 

[Charlie Arehart]

Ok, so now it's not the action of the cfimage that varies the result, but whether you're having it process a blob (binary large object)?

Can you provide us any more info about the blob? You can either cfdump it or use cfimage and its info action to get more.

It would seem hard for us to replicate (or even explain) the problem without that or more info on it. 

[pete_freitag]

My guess is that when you use the blob it doesn't know the content type (is it a jpg a png?, etc) to return so it is initializing Tika to figure this out in that case. I don't think it is actually doing a sentinent analysis on the blob, but just a side effect of the initialization. All just my guesses based on what I've seen. 

[default8rs3k49y1nan]

Charlie, dumping the image only shows you the binary string of it and the cfimage/info action only gives you  size and color characteristics. 

Pete, I am guessing the same, that it was using that to do some manipulation needed to work with the blob for what ever action you are asking it to do and it generates the log entry since it is calling out to employ that tool. 

All in all, i'm putting it to rest. I found what was generating it was legetimate. I don't think i'm going to spend any more time deducing why or how. 

[Charlie Arehart]

There are ways to convert that binary string to an actual image, but as you're letting it go, I'll stand down as well.

This is such an odd message you got that anyone else getting it will likely find this thread, can read what all we wrote, and pickup the flag then if they want to. 

[BKBK]

@default8rs3k49y1nan , you were almost there.

I don't see any need for using cfimage on the blob. You could just convert the blob to base64 and display the image directly.

Let's say, you've obtained an image blob from the database, and it is represented by the variable imageBlobFromDB. Also suppose that the MIME type of the image is image/jpg. Then the following code will display the image:

<!--- Convert the image blob to base64 --->
<cfset imageInBase64 = toBase64(imageBlobFromDB)>

<!--- Now display the image --->
<!--- Replace "&colon;" with ":" in this code --->
<cfoutput><img src="data&colon;image/jpg;base64,#imageInBase64#"/></cfoutput>

[BKBK]

Browsers can read image blobs. So, alternatively, you can use cfcontent to send the blob to the browser.

This involves just one line of code:

<cfcontent type="image/jpg" variable="#imageBlobFromDB#" reset="true">

[BKBK]

I have ColdFusion 2025 on Windows. Though I don't see those INFO lines in coldfusion-out.log, I can confirm that my installation has the file C:\ColdFusion2025\cfusion\jetty\work\jetty-127_0_0_1-8997-solr_war-_solr-any-\webapp\WEB-INF\lib\sentiment-analysis-parser-0.1.jar

It suggests that ColdFusion 2025 is making use of https://github.com/USCDataScience/SentimentAnalysisParser