We have Tomcat running on Ubuntu server. It runs a web service, open to the internet.
Sometimes it has a sudden spike of traffic and goes down. There is nothing unusual in Tomcat access logs. I guess it is because some of the requests are so 'heavy' that they never finish and hence are not recorded to Tomcat access logs.
Is there a way to configure Ubuntu or a 3rd party tool to log incoming requests in the following format (below)?
Date, Time, URL (with query string params), IP address (of client)
There should be one line per request. Each request should be logged before it is executed. Only incoming requests to ports 80 and 443 should be logged.