We're experiencing very high load caused by high disk I/O.
From WHM we can tell which site (s) are being accessed most.
We would like to drill down to the path on the virtual host but apache access log doesn't show the path:
# tail -f /usr/local/apache/logs/access_log
127.0.0.1 - - [06/Jan/2017:19:39:05 +0100] "GET / HTTP/1.0" 200 111
127.0.0.1 - - [06/Jan/2017:19:39:05 +0100] "GET / HTTP/1.0" 200 111
197.237.241.149 - - [06/Jan/2017:19:39:06 +0100] "POST /cpsess2656424093/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" 200 109
197.237.241.149 - - [06/Jan/2017:19:39:06 +0100] "POST /cpsess2656424093/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" 200 109
::1 - - [06/Jan/2017:19:39:08 +0100] "OPTIONS * HTTP/1.0" 200 -
::1 - - [06/Jan/2017:19:39:08 +0100] "OPTIONS * HTTP/1.0" 200 -
::1 - - [06/Jan/2017:19:39:12 +0100] "OPTIONS * HTTP/1.0" 200 -
::1 - - [06/Jan/2017:19:39:12 +0100] "OPTIONS * HTTP/1.0" 200 -
::1 - - [06/Jan/2017:19:39:15 +0100] "OPTIONS * HTTP/1.0" 200 -
::1 - - [06/Jan/2017:19:39:15 +0100] "OPTIONS * HTTP/1.0" 200 -
How an we tell which path is being accessed?
From WHM we can tell which site (s) are being accessed most.
We would like to drill down to the path on the virtual host but apache access log doesn't show the path:
# tail -f /usr/local/apache/logs/access_log
127.0.0.1 - - [06/Jan/2017:19:39:05 +0100] "GET / HTTP/1.0" 200 111
127.0.0.1 - - [06/Jan/2017:19:39:05 +0100] "GET / HTTP/1.0" 200 111
197.237.241.149 - - [06/Jan/2017:19:39:06 +0100] "POST /cpsess2656424093/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" 200 109
197.237.241.149 - - [06/Jan/2017:19:39:06 +0100] "POST /cpsess2656424093/3rdparty/roundcube/?_task=mail&_action=refresh HTTP/1.1" 200 109
::1 - - [06/Jan/2017:19:39:08 +0100] "OPTIONS * HTTP/1.0" 200 -
::1 - - [06/Jan/2017:19:39:08 +0100] "OPTIONS * HTTP/1.0" 200 -
::1 - - [06/Jan/2017:19:39:12 +0100] "OPTIONS * HTTP/1.0" 200 -
::1 - - [06/Jan/2017:19:39:12 +0100] "OPTIONS * HTTP/1.0" 200 -
::1 - - [06/Jan/2017:19:39:15 +0100] "OPTIONS * HTTP/1.0" 200 -
::1 - - [06/Jan/2017:19:39:15 +0100] "OPTIONS * HTTP/1.0" 200 -
How an we tell which path is being accessed?