09-17-2014
Hi,
If the server is not actually under load, you will find it difficult to determine what user was working and what command that they were using. Trying to find what was happening "2-3 hours ago." will be better accomplished by looking at the "alerting system" logs.
Regards
Dave
8 More Discussions You Might Find Interesting
1. Shell Programming and Scripting
hi all
need your help.
I am wrting a script that will load data into the table.
then on another load will append the data into the existing table.
Regards
Ankit (1 Reply)
Discussion started by: ankitgupta
1 Replies
2. Solaris
Folks,
I need to find out from the system logs ( or elsewhere ) if the CPU utilization reached say 90% an hour ago from now.
Is there a way out. (2 Replies)
Discussion started by: kavera
2 Replies
3. UNIX for Dummies Questions & Answers
Hello AlL,..
I want from experts to help me as my load average is increased and i dont know where is the problem !!
this is my top result :
root@a4s # top
top - 11:30:38 up 40 min, 1 user, load average: 3.06, 2.49, 4.66
Mem: 8168788k total, 2889596k used, 5279192k free, 47792k... (3 Replies)
Discussion started by: black-code
3 Replies
4. UNIX for Dummies Questions & Answers
Hello all. I've built a SAMP server on Solaris 10 using Apache 2.2.9 and PHP 5.2.6
For the most part everything seems to be working except when I post form data, Apache causes the CPU to max out. Sometimes the script will complete about 40 seconds later. Other times I have to stop Apache to get... (4 Replies)
Discussion started by: RobertSubnet
4 Replies
5. Solaris
Hi,
Does anyone know how to check which process has been used the most CPU between certain time period?
say I have noticed CPU spike happend between 1:00 to 1:30
now it is 3:00 o'clock already. Is there anyway to find out what process/PID use the most CPU then?
Thanks a lot (3 Replies)
Discussion started by: uuontario
3 Replies
6. Solaris
I'm running on Solaris 10, and I have a script that's running on several machines. Basically, what it's doing is:
* tail -f | grep one or more log files into a temp file
* Every minute or so, copy that temp file to a second temp and zero the first
* Sed through the 2nd temp to pull out a user... (2 Replies)
Discussion started by: Rorgg
2 Replies
7. AIX
Hi
when I try to open wsm from the remote side
I am not able to load wsm
it gives me the error
host cannot find the address xx.xx.xx.xx
can anyone help? (0 Replies)
Discussion started by: antointoronto
0 Replies
8. UNIX for Dummies Questions & Answers
Hello, on my hostserver i see one VPS of mine got load of 200.00 and netstat nothing (not a single blank line on netstat command) after some time, netstat started showing connections, but i see no excessive IP connections.
tail -f /var/log/httpd/access_log shows no activity
/var/log/messages ;... (1 Reply)
Discussion started by: postcd
1 Replies
LEARN ABOUT DEBIAN
mergelogs
MERGELOGS(1) General Commands Manual MERGELOGS(1)
NAME
mergelogs - merge and consolidate web server logs
SYNOPSIS
mergelogs -p penlog [-c] [-d] [-j jitter] [-t seconds] server1:logfile1 [server2:logfile2 ...]
EXAMPLES
mergelogs -p pen.log 10.0.0.1:access_log.1 10.0.0.2:access_log.2
mergelogs -p pen.log 10.0.18.6:access_log-10.0.18.6 10.0.18.8:access_log-10.0.18.8
DESCRIPTION
When pen is used to load balance web servers, the web server log file lists all accesses as coming from the host running pen. This makes it
more difficult to analyze the log file.
To solve this, pen creates its own log file, which contains the real client address, the time of the access, the target server address and
the first few bytes of the requests.
Mergelogs reads pen's log file and the log files of all load balanced web servers, compares each entry and creates a combined log file that
looks as if the web server cluster were a single physical server. Client addresses are replaced with the real client addresses.
In the event that no matching client address can be found in the pen log, the server address is used instead. This should never happen, and
is meant as a debugging tool. A large number of these indicates that the server system date needs to be set, or that the jitter value is
too small.
You probably don't want to use this program. Penlog is a much more elegant and functional solution.
OPTIONS
-c Do not cache pen log entries. The use of this option is not recommended, as it will make mergelogs search the entire pen log for
every line in the web server logs.
-d Debugging (repeat for more).
-p penlog
Log file from pen.
-j jitter
Jitter in seconds (default 600). This is the maximum variation in time stamps in the pen and web server log files. A smaller value
will result in a smaller pen log cache and faster processing, at the risk of missed entries.
-t seconds
The difference in seconds between the time on the pen server and UTC. For example, this is 7200 (two hours) in Finland.
server:logfile
Web server address and name of log file.
AUTHOR
Copyright (C) 2001-2003 Ulric Eriksson, <ulric@siag.nu>.
SEE ALSO
pen(1), webresolve(1), penlog(1), penlogd(1)
LOCAL MERGELOGS(1)