GIt add notes for 2017-11-26

content/post/2017-11.md

@@ -851,3 +851,22 @@ $ grep 70.32.83.92 dspace.log.2017-11-23 | grep -o -E 'session_id=[A-Z0-9]{32}'
 ```
 
 - I should probably tell CGIAR people to have CGNET stop that
+
+## 2017-11-26
+
+- Linode alerted that CGSpace server was using too much CPU from 5:18 to 7:18 AM
+- Yet another mystery because the load for all domains looks fine at that time:
+
+```
+# cat /var/log/nginx/access.log /var/log/nginx/access.log.1 /var/log/nginx/library-access.log /var/log/nginx/library-access.log.1 | grep -E "26/Nov/2017:0[567]" | awk '{print $1}' | sort -n | uniq -c | sort -h | tail
+    190 66.249.66.83
+    195 104.196.152.243
+    220 40.77.167.82
+    246 207.46.13.137
+    247 68.180.229.254
+    257 157.55.39.214
+    289 66.249.66.91
+    298 157.55.39.206
+    379 66.249.66.70
+   1855 66.249.66.90
+```