IIS Site metrics for monitoring potential DDOS attack

lancasterb

Hi,

We have an IIS monitor setup for one of our websites, the website takes a performance his that coincides with Solarwinds showing there being 100+ current connections to the website. Are there any metrics I can use within Solarwinds to help correlate the hit in performance and something going on with the websites\web server. CPU and Memory is fine during the time when website performance is slow and there are many connections. Website response time seems fine too.

Are there any other metrics you could suggest and where I could fine them, the website is in Solarwinds using the IIS insight monitor.

Thanks

saschg

What products are available—the complete self-hosted platform or the older modules with Server & Application Monitor? The AppStack feature allows you to look at other metrics in the same stack, which might give a few more hints. 

Alternatively, use Performance Analysis. It's semi-automatic but will give you access to even more metrics.

It also depends a little bit on what kind of website you're monitoring. If there's a database involved, have a look at that one, too. If in doubt, it's always the database's fault!

Last but not least, it might help to use application performance monitoring to see what's happening inside the code. In situations like the one you're describing, it could very well be PHP throwing too many errors.