Need to debug a problem? Hypernode has many possibilities to analyse a suspicious or unwanted situation. Learn where to look and reach a conclusion fast.

Notes on log files in general

System and logfile times are in UTC (GMT) timezone! Dutch time is UTC+1 in winter and UTC+2 in summer.

Log files are rotated daily. Previous log files are compressed using gzip. They can be viewed with commands such as zcat or zgrep.


Most issues will result from specific people or external systems interacting with your shop over HTTP. There are several tools to tell you what happened and what is currently going on.

Live usage

To see live, ongoing requests on your Hypernode, type livefpm and you will see a continuous overview like this:

Here, there are 3 PHP slots, of which 2 are busy. You see the duration (keep it below 1 sec for happy visitors!), the country, IP, request and user agent.

Past usage

There is a wealth of information on past requests available. Hypernode uses extended request logging using JSON. The live log is in /var/log/nginx/access.log and is rotated daily. Because it can be hard to read the raw data, we have made the hypernode-parse-nginx-log (or short: pnl) tool for you.

See the help for pnl:

You can use the following fields for filtering or output:

  • status (http status code)
  • ua (user agent)
  • req (request)
  • ip
  • cc (country code)
  • referer
  • duration
  • handler (php-fpm, varnish, empty)


See live hits as they happen, but only those who are handled by PHP (tal is short for tail -f /var/log/nginx/access.log):

Parse multiple log files, possibly gzipped:

See all bots today with their user agents:

See all HTTP 500 hits.

See how many times a particular HTTP status code was returned today (formatted in a nice table).

See a distribution of all 502 (bad gateway) hits over all logfiles.

See whether bot traffic has increased over the last few days

See all 404 hits that were handled by Magento in yesterday’s log (so you can make static placeholders)

See all pageviews from China

Or all pageviews not from Holland:

Check all bot pageviews (and user agents) and sort on frequency

See all Android hits

How many PHP requests were there yesterday?

How many unique IPs were served yesterday?

Find all IPs that used multiple user agents today

Calculate total outbound traffic for yesterday (in this case, 20GB):

See hypernode-parse-nginx-log --help for more options on filtering and output.


Basic operational webserver errors (about blocked requests) are logged to /var/log/nginx/error.log.

If you have modified your Nginx configuration (by updating files in /data/web/nginx) and it contains an error, it will put the error message in /data/web/nginx/nginx_error_output. After you resolve the issue, the file will disappear. If no such file exist, it means that your configuration is ok!


Debugging PHP issues

For debugging PHP issues, these files are useful:

You can check whether PHP failed, because the webserver will give a HTTP 502 Bad Gateway error. Check whether these errors have occurred:

Headers already sent

The error Warning: Cannot modify header information - headers already sent (output started at script:line) basically tells you that the actual output of your PHP script was returned before the complete HTTP headers could be sent. This error can be caused by a number of reasons, most commonly:

  • Whitespace before <?php for “script.php line 1” warnings
  • Whitespace after ?>
  • Print or echo statements that prematurely terminate the opportunity to send HTTP headers

An in-depth explanation on how to determine what is causing the issue and how to fix it can be found here


Debuggin MySQL issues starts with running mytop. It will give you an overview of the active queries. Use the o and f keys to sort on duration and to see the full query.

To check on past queries, see the slow log at /var/log/mysql/mysql-slow.log. It contains all the queries that took longer than 2 seconds.

If your queries are stopped before completion, check in /var/log/mysql/error.log whether MySQL has crashed and is restarted (happens seldomly).

FTP usage

Logs of logins and transfer can be found at /var/log/proftpd/proftpd.log.


Check on the status of outgoing mail in /var/log/mail.log. Also, check if any outgoing mail is still in the queue, by running mailq. As an app user you have a tool available to remove emails from the mailqueue. On Hypernode we have email policies. If the volume of emails to send is higher than the number of emails being processed for delivery, the queue grows larger and this may consume considerable disk space.

With hypernode-postsuper you can clear items from the mail queue. Details can be found in our changelog about the hypernode-postsuper tool.

Cron tasks

Verify starting of your cron tasks:

If you have installed the excellent Aoe_Scheduler module, it will also keep a Magento specific cron log in public/var/log/cron.log.

Magento errors

Magento is generally abundant in logging issues. It will write these to public/var/report and public/var/log.

Generic solutions

Flush your caches

Most of the times when something goes wrong in Magento, it can be solved by simply flushing your cache. There are a couple of ways of flushing your cache:

  1. Use the Cache Management in Magento. Log in to the backend of your Magento shop. Go to System –> Cache Management and use the flush buttons.
  2. Use Magerun on the commandline: magerun cache:flush
  3. Flush Redis-specific cache on the commandline: redis-cli flushall

Restart PHP-FPM

If you want to reload PHP-FPM or kill all currently running processes that you would like to abort, you can run the SSH shell: $ pkill -9 -u app php5-fpm

This will kill all workers (which will be restarted) but keeps the master process alive, leaving PHP-FPM in a state it can easily start new threads to continue.

Restart services (MySQL, Nginx, php7.1-fpm, Varnish, Redis) as an app user

As an the app user you have the capability of restarting or reloading a select number of services like MySQL, Nginx, php7.1-fpm and Varnish. The command is hypernode-servicectl and it takes as arguments an action (restart or reload) and a service (Nginx, php7.1-fpm, etc). This can be useful to resolve some user space issues.

The command can be executed as hypernode-servicectl or /usr/bin/hypernode-servicectl. The help menu displays the available options.

More information on this handy command can be found in this Hypernode Changelog and the one dedicated to restarting Redis.

Troubleshooting slow MySQL queries

First, check whether any slow queries are running right now. $ mytop If there are many queries, type ‘o’ to reverse the order and show longest running queries on top. If there’s a particular long running query, type ‘f’ and then the id to view the full query. If you want to abort it, type ‘k’ and then the query id to kill it. Warning: generally only do this for SELECT queries. Killing other queries might corrupt your data. Second, examine recent slow queries $ less /var/log/mysql/mysql-slow.log. Once you have find a suspect (for example, a query that takes longer than 2 seconds), you can prefix your queri with the EXPLAIN keyword to find where the bottleneck is. For example:

This will not run your query, but tell you how many rows were examined, whether an index was used, and what kinds of sorting algorithms were used. In this case, there was a relatively low number of rows involved (2159). However, the filesort algorithm is extremely slow and should be avoided. See more information about avoiding filesort here and here. The solution in this case is to add a proper index on the updated_at column.