I have a small asp.net website (using SQLServer express) on an T2.micro AWS EC2 instance running Windows Server 2012 R2. This is a very low volume site. It has been operational for 2 years without any issues.
I did Windows updates over the New Years and now everyday I am getting a CPU over 100% alert from Cloudwatch between 3:00 and 5:00am. This isn't users or usage, but likely some other automated process. My question is what is the best way to identify why this is occurring and if needed, stop it?
I look at the Event log and right before the alerts there are entries relating to "Windows Module Installer" under the source of "Service Control Manager". They are otherwise not descriptive.
I believe these could be related to automated updates. I did change the update setting to 'Download Updates But Let Me Choose to Install Them' so I was thinking that this process could be running during early morning hours.
Is there any better log or or way (through AWS perhaps) to identify what process is causing a CPU alarm?
Thank you for any guidance or suggestions!