htop is a useful option for administrators investigating live process activity. Sort processes by the resource connected to the problem and use the tree view to understand parent-child relationships. Start with a small, representative task so you can check the results before extending the setup.
Inspect a process before changing its priority or terminating it, and collect additional logs when the problem is intermittent. Consider the practical trade-off: limited historical context.