sadf - Display data collected by sar in multiple formats.
sadf [ -C ] [ -c | -d | -g | -j | -p | -x ] [ -H ] [ -h ] [ -T | -t | -U ] [ -V ] [ -O opts [,...] ] [ -P { cpu [,...] | ALL } ] [ -s [ hh:mm[:ss] ] ] [ -e [ hh:mm[:ss] ] ] [ -- sar_options ] [ interval [ count ] ] [ datafile | -[0-9]+ ]
The sadf command is used for displaying the contents of data files created by the sar(1) command. But unlike sar, sadf can write its data in many different formats (CSV, XML, etc.) The default format is one that can easily be handled by pattern processing commands like awk (see option -p). The sadf command can also be used to draw graphs for the various activities collected by sar and display them as SVG (Scalable Vector Graphics) graphics in your web browser (see option -g). The sadf command extracts and writes to standard output records saved in the datafile file. This file must have been created by a version of sar which is compatible with that of sadf. If datafile is omitted, sadf uses the standard system activity daily data file. It is also possible to enter -1, -2 etc. as an argument to sadf to display data of that days ago. For example, -1 will point at the standard system activity file of yesterday. The standard system activity daily data file is named saDD or saYYYYMMDD, where YYYY stands for the current year, MM for the current month and DD for the current day. sadf will look for the most recent of saDD and saYYYYMMDD, and use it. By default it is located in the /var/log/sysstat directory. Yet it is possible to specify an alternate location for it: If datafile is a directory (instead of a plain file) then it will be considered as the directory where the standard system activity daily data file is located. The interval and count parameters are used to tell sadf to select count records at interval seconds apart. If the count parameter is not set, then all the records saved in the data file will be displayed. All the activity flags of sar may be entered on the command line to indicate which activities are to be reported. Before specifying them, put a pair of dashes (--) on the command line in order not to confuse the flags with those of sadf. Not specifying any flags selects only CPU activity.
-C Tell sadf to display comments present in file. -c Convert an old system activity binary datafile (version 9.1.6 and later) to current up-to-date format. Use the following syntax: sadf -c old_datafile > new_datafile -d Print the contents of the data file in a format that can easily be ingested by a relational database system. The output consists of fields separated by a semicolon. Each record contains the hostname of the host where the file was created, the interval value (or -1 if not applicable), the timestamp in a form easily acceptable by most databases, and additional semicolon separated data fields as specified by sar_options command line options. Note that timestamp output can be controlled by options -T, -t and -U. -e [ hh:mm[:ss] ] Set the ending time of the report, given in local time. The default ending time is 18:00:00. Hours must be given in 24-hour format. -g Print the contents of the data file in SVG (Scalable Vector Graphics) format. This option enables you to display some fancy graphs in your web browser. Use the following syntax: sadf -g your_datafile [ -- sar_options ] > output.svg and open the resulting SVG file in your favorite web browser. -H Display only the header of the report (when applicable). If no format has been specified, then the header data (metadata) of the data file are displayed. -h When used in conjunction with option -d, all activities will be displayed horizontally on a single line. -j Print the contents of the data file in JSON (JavaScript Object Notation) format. Timestamps can be controlled by options -T and -t. -O opts [,...] Use the specified options to control SVG output displayed by sadf -g. Possible options are: autoscale Draw all the graphs of a given view as large as possible based on current view's scale. To do this, a factor (10, 100, 1000...) is used to enlarge the graph drawing. This option may be interesting when several graphs are drawn on the same view, some with only very small values, and others with high ones, the latter making the former hardly visible. oneday Display graphs data over a period of 24 hours. Note that hours are still printed in UTC by default: You should use option -T to print them in local time and get a time window starting from midnight. skipempty Do not display views where all graphs have only zero values. -P { cpu [,...] | ALL } Tell sadf that processor dependent statistics are to be reported only for the specified processor or processors. Specifying the ALL keyword reports statistics for each individual processor, and globally for all processors. Note that processor 0 is the first processor. -p Print the contents of the data file in a format that can easily be handled by pattern processing commands like awk. The output consists of fields separated by a tab. Each record contains the hostname of the host where the file was created, the interval value (or -1 if not applicable), the timestamp, the device name (or - if not applicable), the field name and its value. Note that timestamp output can be controlled by options -T, -t and -U. -s [ hh:mm[:ss] ] Set the starting time of the data (given in local time), causing the sadf command to extract records time-tagged at, or following, the time specified. The default starting time is 08:00:00. Hours must be given in 24-hour format. -T Display timestamp in local time instead of UTC (Coordinated Universal Time). -t Display timestamp in the original local time of the data file creator instead of UTC (Coordinated Universal Time). -U Display timestamp (UTC - Coordinated Universal Time) in seconds from the epoch. -V Print version number then exit. -x Print the contents of the data file in XML format. Timestamps can be controlled by options -T and -t. The corresponding DTD (Document Type Definition) and XML Schema are included in the sysstat source package. They are also available at http://pagesperso-orange.fr/sebastien.godard/download.html
The sadf command takes into account the following environment variable: S_TIME_DEF_TIME If this variable exists and its value is UTC then sadf will use UTC time instead of local time to determine the current daily data file located in the /var/log/sysstat directory.
sadf -d /var/log/sysstat/sa21 -- -r -n DEV Extract memory and network statistics from system activity file 'sa21', and display them in a format that can be ingested by a database. sadf -p -P 1 Extract CPU statistics for processor 1 (the second processor) from current daily data file, and display them in a format that can easily be handled by a pattern processing command.
SVG output (as created by option -g) is fully compliant with SVG 1.1 standard. Graphics have been successfully displayed in various web browsers, including Firefox, Chrome and Opera. Yet SVG rendering is broken on Microsoft browsers (tested on Internet Explorer 11 and Edge 13.1): So please don't use them.
/var/log/sysstat/saDD /var/log/sysstat/saYYYYMMDD The standard system activity daily data files and their default location. YYYY stands for the current year, MM for the current month and DD for the current day.
Sebastien Godard (sysstat <at> orange.fr)
sar(1), sadc(8), sa1(8), sa2(8), sysstat(5) http://pagesperso-orange.fr/sebastien.godard/
Personal Opportunity - Free software gives you access to billions of dollars of software at no cost. Use this software for your business, personal use or to develop a profitable skill. Access to source code provides access to a level of capabilities/information that companies protect though copyrights. Open source is a core component of the Internet and it is available to you. Leverage the billions of dollars in resources and capabilities to build a career, establish a business or change the world. The potential is endless for those who understand the opportunity.
Business Opportunity - Goldman Sachs, IBM and countless large corporations are leveraging open source to reduce costs, develop products and increase their bottom lines. Learn what these companies know about open source and how open source can give you the advantage.
Free Software provides computer programs and capabilities at no cost but more importantly, it provides the freedom to run, edit, contribute to, and share the software. The importance of free software is a matter of access, not price. Software at no cost is a benefit but ownership rights to the software and source code is far more significant.
Free Office Software - The Libre Office suite provides top desktop productivity tools for free. This includes, a word processor, spreadsheet, presentation engine, drawing and flowcharting, database and math applications. Libre Office is available for Linux or Windows.
The Free Books Library is a collection of thousands of the most popular public domain books in an online readable format. The collection includes great classical literature and more recent works where the U.S. copyright has expired. These books are yours to read and use without restrictions.
Source Code - Want to change a program or know how it works? Open Source provides the source code for its programs so that anyone can use, modify or learn how to write those programs themselves. Visit the GNU source code repositories to download the source.
Study at Harvard, Stanford or MIT - Open edX provides free online courses from Harvard, MIT, Columbia, UC Berkeley and other top Universities. Hundreds of courses for almost all major subjects and course levels. Open edx also offers some paid courses and selected certifications.
Linux Manual Pages - A man or manual page is a form of software documentation found on Linux/Unix operating systems. Topics covered include computer programs (including library and system calls), formal standards and conventions, and even abstract concepts.