Finding a history(past) process ID that has killed

[KCS_1]

Hi,Everyone!

I wanna find a past process of ID that has killed. actually, I have found it from syslog.log where was just process ID so wanna more detailed imformation that why process killed and when start/stop the process by what.
when I was trying to find out on the Pefview,
which couldn't found any information of the process that was so strange why?

please tell me that how to find out it?
why the process number was logged in syslog.log but, the pefview couldn't give me nothing even the process ID,such as syslog.log.

good helps will be appreiciated

Best Regards

-Patrick

[Tim Adamson_1 · Accepted solution]

Hi Patrick,

Perfview will collect data at periodic intervals. So if a process starts and finishes within that interval, perfview will not know about it.

Hope that helps a bit.


Cheers!

[Michael Tully]

I'm fairly sure that perfview will not pick up as to why a process died. The process can only be monitored by using the correct tools and it is a little difficult after the event. Good tools are 'lsof' and 'tusc', again not much good after the event. ABout the only tool you could use is the system accounting for next time. Have a look at 'runacct' for further information. Starting tools like this will require disk space and of course a small overhead of process time.