[rhelv6-list] sar

[Bob Arendt]

On 03/04/2014 01:12 PM, Iain Morrison wrote:
> -rw-r--r--. 1 root root 1786068 Mar  1 23:50 /var/log/sa/sa01
> -rw-r--r--. 1 root root 1786068 Mar  2 23:50 /var/log/sa/sa02
> -rw-r--r--. 1 root root 1786068 Mar  3 23:50 /var/log/sa/sa03
> -rw-r--r--. 1 root root 1649668 Mar  4 20:10 /var/log/sa/sa04
> -rw-r--r--. 1 root root  893268 Feb  5 23:50 /var/log/sa/sa05
> -rw-r--r--. 1 root root  893268 Feb  6 23:50 /var/log/sa/sa06
> -rw-r--r--. 1 root root  893268 Feb  7 23:50 /var/log/sa/sa07
>
<.. snip..>

Yes - sadc (the one writing the files) always appends to the end of the file.
In the event of a system reboot, all the data remains together and
in chronological order.  Sort of handy, since you can see the
levels of activity before a crash.

But - let the month wrap around and you get something that sar
can't really deal with - you can't select the new data using
the -s , -e options, it only shows the initial day of data.
You really need to have something age off the old logs before
the date wraps around again.

Not a bug ... it's a feature :)

Cheers,
-Bob Arendt