-1

I am using munin to track overall system resource usage so I know that there was a peak last night. The problem is that I miss a tool to find out what processes were running at the time so I have no way to analyze it further. For that purpose I have installed psacct package on my centos 6.3 machine so that next time a peak occurs I can find out the cause.

The package psacct looked good for that purpose but after installing it I am not sure how to print processes executed in a certain time range. Is there a way to do it? Or should I pick some other tool/package to get the past information about processes (launch/completion time and ideally their system usage).

Now that I think of it, I can also log output of top every minute or so. That would probably serve the purpose but maybe there is a better way.

clime
  • 407
  • 1
  • 7
  • 14
  • Why downvote? I though tracking your system is very important stuff and having useful logs about past processes is not as easy to do as I expected it to be. – clime Oct 13 '13 at 20:11

1 Answers1

0

Process accounting needs to be running prior to the process being started. It will not account already running processes when process accounting was enabled.

You'll need to restart the processes for it to account them.

Matthew Ife
  • 22,927
  • 2
  • 54
  • 71
  • I have modified the question significantly, sorry for that. – clime Oct 13 '13 at 15:43
  • `lastcomm` can analyze the process accounting file and produce the processes executed during that period. The information is lacking at best so youll probably want further log analysis to crosscheck what comes out of it. – Matthew Ife Oct 13 '13 at 16:05