How to "prstat" yesterday's active processes

[warrenliang]

Hello,

How can I get a report of active processes for a specified period time? Sar report from two days ago, displays a high CPU usage between 13:00 and 13:15. I like to find out which process(es) was consuming the most CPU.

System activity report package sadc is running on the Solaris box. It generate files /var/adm/sa/sa*.

O/S: Solaris 9.

Thanks in advance,
Warren

 

[kduffin]

Warren,

Unless you have configured 'auditd' or some other process/system call monitoring, you will be hard pressed to identify what was generating your peak load. Sun's BSM auditing is nice, but depending on how it is configured, it can cause a noticable performance hit.

What is the server used for? (Web, J2EE, DB etc.) Your application specific logs for that timeframe might be the easiest way to identify what was going on.

Keith


Keith Duffin

http://www.duffin.org

 

[warrenliang]

Hello Keith,

Thansk for your information, I will check into auditd.

I suspect a home-grown program to cause this incident.

Have a nice day,

Warren,