I hope that this is the current thread (of many) for this topic.
To my mind the key point is in this statement from O/P. I could be wrong.
Quote:
---- Reply is----
The assumption and calculation are not correct. You must look at the top line where you have the starting date.
next lines have starting time. Use both of these pieces for info. Sar file will not contain 48 hours of data-----
This ties up with my assumption that this is an incorrectly set up "sar" data collection and that there are multiple occurances of the day of the month appended into the sar(nn) data file. There is a strong hint in the quote above that you need to process more than one day file.
Depending on what time of day the report is run it would take two (or three) of these sar data files to get 48 hours data. This is further complicated at month boundaries. It is much too complicated to process in retrospect and requires some forward planning. If my guess is correct the sa(nn) files will grow as more data is appended.
A logical approach would be to prepare one day's summary data at the end of each day in a file named after the date in the sar heading. It is then a case of mailing the most recent two files concatonated.