Solaris

Is there any scripts to capture the process which use more than 5% CPU from prstat output?

Probably something like this should do:

Code:

prstat|awk '{ if ($9 >= 5) print $0 }'

I don't have prstat on my system, but, you'll probably need something more like:

Code:

prstat|awk '{ if (($9+0) >= 5) print $0 }'

to be sure you get a numeric comparison rather than a string comparison.

And, if that works, you can shorten the above script to:

Code:

prstat|awk '($9+0) >= 5'

since the default action in an awk statement with an expression that evaluates to TRUE is to print the input line.

One other point

prstat with no interval and count runs until you type ctrl/c or something else stops the process.

Code:

prstat 5 5

runs for 25 seconds.

If you want to "log" data from a entire day, you may want to use other tools. Consider enabling sar as a starting point.

IMO, a single snapshot of prstat does not give you much to go on. You have to proceed on to other tools, like iostat, fsstat, vmstat, or maybe dtrace. sar gets you further down the road to solving performance problems right from the beginning. And with sar you have a sort of running history to see episodic symptoms.

Here is a variant of what was already suggested.

It increases from 15 to 20 the number of processes to check in order to make sure no process is left out, it filters out lines not showing processes but the load average in the 9th column and it uses the right Solaris awk implementation:

Code:

prstat -c -n 20 | nawk '$9 ~ "%" && $9 >= 5'

If you are running Solaris 11, here is a way to prepend a timestamp to the output:

Code:

prstat -d u -c -n 20 | nawk 'NF == 1 { ts=$1 } $9 ~ "%" && $9 >= 5 { print ts , $0 }'

Hi Jim Mcnamara,
thanks for your reply. Can you help to elaborate on how to run SAR to troubleshoot performance issue?

The advantage of sar is that is automatize statistical captures and allow displaying them later. However, it targets system performance and isn't going to help that much figuring out which process is responsible of a performance issue.

Note also that a process using more than 5% of the CPU capacity is far for being an issue. A process using 100% of the CPU(s) might not be even one, that's why you buy CPUs after all. There are more relevant metrics.

I would suggest you to read this Solaris documentation:
Monitoring System Performance (Tasks) - Oracle Solaris Administration: Common Tasks