acctcom - search and print process accounting files
[[option]... [file]] ...
The command reads file, standard input, or in the form described in acct(4) and writes selected records to standard output. Each record
represents the execution of one process. The output has the following column titles:
Optionally, the following can be displayed:
flag: for without
System exit status
Total blocks read and written
PRM process resource group ID
The command name is preceded by a if a privileged user is required to execute the command.
For example, if a user is logged in as and executes the command to check the time, this does not require a privileged user, and will be
shown by without the character on the line. If the user executes the command to set the time, this requires a privileged user, and so will
be marked with a by
If a process is not associated with a known terminal, a is printed in the field.
The system exit status is if the process terminated by calling If it is not it is the signal number that caused the process to terminate.
If a core file image was produced as a result of the signal (see signal(5)), the value is the signal number plus
If no files are specified, and if standard input is associated with a terminal or (as is the case when using in a shell), reads Otherwise,
it reads standard input.
If any file arguments are given, they are read in their respective order. Each file is normally read forward, that is, in chronological
order by process-completion time. The file is usually the current file to be examined. A busy system may need several such files of which
all but the current file are found in
recognizes the following values for the option argument. Listing options together has the effect of a logical AND.
Show some average statistics about the processes selected.
Statistics are printed after the output records.
Read backwards, showing latest commands first.
This option has no effect when standard input is read.
Print in octal the
flag and system exit status columns in the output.
Instead of mean memory size,
show the fraction of total available CPU time consumed by the process during its execution. This is computed as:
Print columns containing the I/O counts in the output.
Instead of memory size, show total kcore-minutes.
Show mean core size (the default).
Show the PRM process resource group ID
of each process. See DEPENDENCIES.
Show CPU factor:
Show separate system and user CPU times.
Exclude column headings from the output.
Show only processes belonging to terminal
Show only processes belonging to
user, specified as: a user ID, a login name that is then converted to a user ID, a which designates only those pro-
cesses executed by a privileged user, or which designates only those processes associated with unknown user IDs. The
and characters should be preceded by a backslash and typed as and to prevent the shell from interpreting the as the
start of a comment, or the as a pattern.
Show only processes belonging to
group, specified as either the group ID or group name.
Select processes existing at or after
time, given in the format:
Select processes existing at or before
Using the same time for both and shows the processes that existed at time; see
Select processes starting at or after
Select processes ending at or before
Show only commands matching
pattern, where pattern is a regular expression as in ed(1) except that means one or more occurrences.
Do not print any output records.
Just print the average statistics as with the option.
Copy selected process records in the input data format to
ofile. Suppress standard output printing.
Show only processes that exceed
factor, where factor is the "hog factor" as explained in option
Show only those processes with operating system CPU time exceeding
Show only processes with total CPU time, system plus user, exceeding
Show only processes transferring more characters
than the cut-off number given by chars.
Show only processes belonging to process resource group
prmgroup, specified as either process resource group name or ID number. See DEPENDENCIES.
only reports on processes that have terminated. For active processes, use the command (see ps(1)).
If time exceeds the current system clock time, time is interpreted as occurring on the previous day.
The accounting flag is not cleared when one processes exec's another, but only when one process forks another. One side-effect of this is
that some processes will be marked with when users do not expect them to be.
For example, the command requires a privileged user to assume the identity of the user who is logging-in, setting the ASU bit in the
accounting flag (which ultimately causes the symbol in the output). After assuming the user's identity, exec's the user's shell. Since
the exec does not clear the ASU flag, the shell will inherit it, and be marked with a in the output.
The mean memory size may overflow for values greater than
HP Process Resource Manager
The and options require the optional HP Process Resource Manager (PRM) software to be installed and configured. See prmconfig(1) for a
description of how to configure HP PRM, and prmconf(4) for the definition of process resource group.
ps(1), su(1), acct(1M), acctcms(1M), acctcon(1M), acctmerg(1M), acctprc(1M), acctsh(1M), fwtmp(1M), runacct(1M), acct(2), wait(2), acct(4),
HP Process Resource Manager: prmconfig(1), prmconf(4) in