Sorry 'Task Manager' (WIndows Task Manager) does not display the time that each process started (My mistake).
You can get this information via Powershell
Get-WmiObject win32_process | Select-Object Name, ProcessId, WorkingSetSize, HandleCount, ThreadCount, CreationDate, KernelModeTime, UserModeTime, Commandline |Out-GridView
In your case all the ArcSOC CreationDates should be around midnight last night. If there are other start times then, while that start was occuring, there will be an elongated response for the request that caused the start and potentially elongated responses for other requests that arrive while the start is being actioned.
To chase why you have start times away from midnight you need to look at the ArcGIS logs
Firstly to verify that you are capturing the logs you should be able to find the following entries around midnight
Datetime | Type | Code | Message |
28/12/2018 0:00 | INFO | 8000 | Instance of service 'Utilities/PrintingTools' has been created successfully. |
28/12/2018 0:00 | INFO | 8000 | Instance of service 'System/PublishingToolsEx' has been created successfully. |
28/12/2018 0:00 | INFO | 8000 | Instance of service 'System/SpatialAnalysisTools' has been created successfully. |
28/12/2018 0:00 | INFO | 8000 | Instance of service 'System/SpatialAnalysisTools' has been created successfully. |
If you cannot see them then you probably have logging set to 'Warning' or 'Severe'. Try setting the level to 'Info' . There is a performance impact doing this, but we run with it set to 'FINE' and we process over 2 million requests per day without significant impact.
We run with 'FINE' so that we can get request response times..
Datetime | Source | MethodName | Type | Code | Elapsed |
28/12/2018 0:00 | Utilities/Geometry.GeometryServer | /simplify | FINE | 100004 | 0.0029 |
28/12/2018 0:00 | Utilities/Geometry.GeometryServer | /simplify | FINE | 100004 | 0.0008 |
28/12/2018 0:00 | External/Imagery_External.MapServer | WMSServer.GetToPost | FINE | 100002 | 0.00064 |
28/12/2018 0:00 | External/Imagery_External.MapServer | WMSServer.get_Data | FINE | 100004 | 0.57157 |
28/12/2018 0:01 | Utilities/Geometry.GeometryServer | /simplify | FINE | 100004 | 0.00162 |
28/12/2018 0:01 | Utilities/Geometry.GeometryServer | /simplify | FINE | 100004 | 0.00093 |
28/12/2018 0:01 | External/Mineral_External.MapServer | WMSServer.GetToPost | FINE | 100002 | 0.00056 |
28/12/2018 0:01 | External/Mineral_External.MapServer | WMSServer.get_Data | FINE | 100004 | 0.15819 |
28/12/2018 0:01 | External/Imagery_External.MapServer | WMSServer.GetToPost | FINE | 100002 | 0.00035 |
28/12/2018 0:01 | External/Imagery_External.MapServer | WMSServer.get_Data | FINE | 100004 | 0.47298 |
28/12/2018 0:01 | External/Imagery_External.MapServer | WMSServer.GetToPost | FINE | 100002 | 0.00066 |
28/12/2018 0:01 | External/Imagery_External.MapServer | WMSServer.get_Data | FINE | 100004 | 0.21022 |
28/12/2018 0:01 | External/Mineral_External.MapServer | WMSServer.GetToPost | FINE | 100002 | 0.00109 |
You can get similar response data from the IIS logs on the server. As an aside, in regards to your query on tiles, we see the request in the IIS logs, but do not see any stats in the ArcGIS logs. My (uneducated) assumption is that ESRI decided to bypass any logging for TILES in the interests of making it as fast as possible.
We have actually gone to the effort of collecting the IIS and ArcGIS logs into Splunk and then displaying the overheads visually..
The left column is from the IIS logs, the right column is from the ArcGIS logs
The top row is showing the number of requests, the bottom row is showing how long those requests took.
The tile counts in the top left hand chart are the most significant, but become insignificant from an elapsed perspective (and are not shown at all from an ArcGIS perspective).
We did all this work on earlier versions of ArcGIS, hopefully the instrumentation provided by ESRI in the newer versions is more useful (although nothing beats looking at the raw data yourself)