Add notes for 2017-11-22

content/post/2017-11.md

@@ -756,3 +756,27 @@ $ grep -c com.atmire.utils.UpdateSolrStatsMetadata dspace.log.2017-11-19
 ```
 2017-11-21 11:11:09,621 WARN  org.dspace.authenticate.LDAPAuthentication @ anonymous:session_id=2FEC0E5286C17B6694567FFD77C3171C:ip_addr=77.241.141.58:ldap_authentication:type=failed_auth javax.naming.CommunicationException\colon; simple bind failed\colon; svcgroot2.cgiarad.org\colon;3269 [Root exception is javax.net.ssl.SSLHandshakeException\colon; sun.security.validator.ValidatorException\colon; PKIX path validation failed\colon; java.security.cert.CertPathValidatorException\colon; validity check failed]
 ```
+
+## 2017-11-22
+
+- Linode sent an alert that the CPU usage on the CGSpace server was very high around 4 to 6 AM
+- The logs don't show anything particularly abnormal between those hours:
+
+```
+# cat /var/log/nginx/access.log /var/log/nginx/access.log.1 | grep -E "22/Nov/2017:0[456]" | awk '{print $1}' | sort -n | uniq -c | sort -h | tail
+    136 31.6.77.23
+    174 68.180.229.254
+    217 66.249.66.91
+    256 157.55.39.79
+    268 54.144.57.183
+    281 207.46.13.137
+    282 207.46.13.36
+    290 207.46.13.23
+    696 66.249.66.90
+    707 104.196.152.243
+```
+
+- I haven't seen 54.144.57.183 before, it is apparently the CCBot from commoncrawl.org
+- In other news, it looks like the JVM garbage collection pattern is back to its standard jigsaw pattern after switching back to CMS a few days ago:
+
+![Tomcat JVM with CMS GC](/cgspace-notes/2017/11/tomcat-jvm-cms.png)