extracting data from logproc

[Mel Burslan]

I have posted this on the Management tools forum yesterday and still got no responses to it. Maybe someone around here has a few command line tools to help me.

I have a performance problem showing up weekly on one of my servers. From the statmon tool we use, it seems like it is caused by some user processes but nobody seems to be able to find out what is running at this obscure hour of the night.

We run measureware agents on this server, and I think I have more than 3 months' worth of data and the problem started to show up for the last month or so. I am trying to figure out which user and or processes to blame for this CPU hogging activity.

My problem is, I do not have a perfview license to launch the graphical tool to analyze the data, but again, despite how pretty it is, I do not really need tool to generate colorful graphs and such. I just need the data, who-ran-what at a 6 hours or so long window, once every week. Is it possible to extract this type of information from the log files, from the shell prompt ? Or do you have any other suggestions to extract such data ?

As aways, thanks in advance

[TTr]

Do you have Glance running on this server? If not try installing the trial version of Glance and look at your process CPU-I/O for any anomalies.

[Mel Burslan]

If it was that easy to diagnose my problem just by running glance, I wouldn't be here asking for help I believe. This event takes place late Sunday night to very early Monday mornings. I generally sleep during this period while the measureware collects all sorts of data from every each system in my data center. Now, I need to dig into this "collected" data and figure out what happened in this aforementioned period of time on the last 4 weekends.

[TTr]

I think you need to lose some sleep like the rest of us. :)

[Rick Garland · Accepted solution]

Mel:

Using the /opt/perf/bin/extract command will allow you to extract data from the /var/opt/perf/datafiles/logglob file. This will allow you to input specific start/stop dates & times.

Start with the /opt/perf/bin/extract command and look through the MENU, HELP, & GUIDE.

[Mel Burslan]

Thanks Rick,

around the same time your reply arrived, I have found the extract command and was playing with the command line options as I may need to run it repeatedly for different time slices. The command which seems to work for me is:

extract -xp -b mm/dd/yy HH:MM -e mm/dd/yy HH:MM -p

this command generates a file called xfrdPROCESS.asc file, which is a pure ascii file, editable with wordpad program found on the Redmond's finest operating system.

Thanks again.
-Mel