Please forgive me if I am posting this in the wrong forum - if I am, please recommend where I should post it.
Around 5:00 AM yesterday, during a time of very light use, our server's load peaked and crashed. I am quite certain this is not a hardware issue since our site runs very smoothly with several hundred users during the school day. It is a dedicated server, 12GB of RAM, with a 12 core xenon processor, running CentOS.
The reason I am posting this in the security section, is that in the hours leading up to the crash, the logs had several hundred of the following entries:
|Time||User full name||Affected user||Event context||Component||Event name||Description||Origin||IP address|
|13 May, 00:05||Schools Moodle Administrator||Adam C****||User: Adam C****||System||Calendar event created||The user with id '2' created the event 'Quiz' with id '2400971'.||cli|
By the way, the user "Schools Moodle Administrator" is me, and I was not logged in at this time. Also, the IP address was blank in the logs, but I did redact the affected user's last name.
Is this normal? Does anyone have any idea as to what is happening? Any suggestions would be extremely appreciated.