Question

How to find out what caused 1/5/15 loads to peak

My droplet stopped responding and Nginx errored out, which coincided with 1/5/15 load graph massively peaking. I’m trying to find out what was the cause.

It is a basic droplet with 8GB memory, 4CPUs, 160GB SSD. Running Wordpress and NextJS/React - nothing crazy. On average, getting 1,000-1,500 visitors per day.

All other metrics during that time remained stable (CPU - below 5%, Memory - below 20%, Disk I/O, Disk usage, Bandwidth). I looked both into Google Analytics and in Nginx access logs, and there was no real traffic spike or any unusual access requests.

Is there any way for me to trace what happened? What could be the usual cause?


Submit an answer
Answer a question...

This textbox defaults to using Markdown to format your answer.

You can type !ref in this text area to quickly search our full set of tutorials, documentation & marketplace offerings and insert the link!

Sign In or Sign Up to Answer

These answers are provided by our Community. If you find them useful, show some love by clicking the heart. If you run into issues leave a comment, or add your own answer to help others.

Bobby Iliev
Site Moderator
Site Moderator badge
January 20, 2023

Hi there,

In addition to what has already been mentioned, I could suggest checking out the following answer on how to find the processes that are consuming most of your resources:

https://www.digitalocean.com/community/questions/how-to-find-the-processes-that-are-consuming-the-most-server-resources

In addition to that, I would also recommend the following script, which you could use to summarize your access logs and find any potential suspicious requests:

https://devdojo.com/bobbyiliev/bash-script-to-summarize-your-nginx-and-apache-access-logs

Let me know how it goes!

Best,

Bobby

KFSys
Site Moderator
Site Moderator badge
January 20, 2023

Hi @geochanto,

Well, you can check the logs in the /var/log folder for any abnormal behavior. It’s possible a process got stuck and generated the load. Apart from logs there is not much you can do unless you catch the high load while it’s happening.

If you do while it’s happening, use tools like top, htop to see which processes are taking the most CPU/RAM and try to see why they have been generated ( if not by traffic).