How to find out which site is loading the server?

Question

MODX

Hello community.
In short, the server is of average parameters, it has ~30 sites + backups, mostly modx, and racially correct additions.

Before N.G. everything was ok, on the 1st there was a fall, then on the 2nd -3rd it hung up to 8 in between. At first I sinned on ddos, the support service later began to rub about exceeded limits on the disk. quota, memory, etc. They ask to take another more expensive tariff ...

I looked in ssh, everything seems to be OK, and therefore I have doubts about what could be the reason and how to determine which site exactly loads the server? I read the last topic habrahabr.ru/qa/3348/ and tried it.

More options?

Answer 1

Look at the load, then find out which process (s) is loading, and then look for the culprit.
In fact, you should initially think about this and implement a monitoring system.
if the sites work under different users, then the process will show (whose it is), if under one, then look at the logs.

Answer 2

in the Apache logs, you can turn on the recording of the processing time of each request
, look at who this time is long, so calculate not only the site, but also the specific location of the site