@juergen_hubert RE: log analysis, have you tried ingesting the logs, especially the access logs, into a tool like OpenSearch / Kibana and plotted them histographically? You can also slice them by endpoint, user agent, IP address, and other things that could show a mis-behaving scraper / bot, or some other site "accidentally" DDOSing you. Might be useful if you can't find a batch job that explains the load.
R
ruxbat@jorts.horse
@ruxbat@jorts.horse