Iis – How to use PowerShell to parse IIS logs files

Some people consider a good practice, create an app pool per website/application, so that when you need to restart a website it will not affect the others. In the same way, it will create a new IIS worker process w3p.exe per website and by doing so i believe you could monitor more easily each my site was peaking the cpu.

Then to watch in details the CPU usage, you can for instance use Process Explorer from Miscrosft Sysinternal http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx which is a great free tool where you can gather the info you're lookin at.

Hope my tip helps in some way troubleshoot the IIS issue.

A couple of things. When I enable the Microsoft-Windows-IIS-Configuration/Operational event log, I do get events when the site is started or stopped. I get "Verbose" event 29 with this content:

Changes to '/system.applicationHost/sites/site[@name="Default Web Site" and @id="1"]/@state' at 'MACHINE/WEBROOT/APPHOST' have successfully been committed.

This is on Server 2008 R2. Now this doesn't tell you whether the site is started or stopped, but merely indicates that it changed status. Could be helpful if you monitor that log.

A long while back I wrote this: http://www.eventsentry.com/blog/2010/02/how-to-really-monitor-smtp-pop.html. It was a VBScript which would enumerate the virtual directories in IIS and tell you when one of them was stopped. This works on 2003, but unfortunately not on 2008. May be a starting point, I'll revisit this at some point so we can update the script.

Not the answer, but may get you closer to what you are trying to achieve. You'll most definitely will need some script (which is maybe trigger by the above event) which will enumerate the sites and their status.