==== Common Sar Commands ====
<sxh bash>
sar -u 
sar -q
sar -b
sar -B
sar -d (device)
sar -n DEV
sar -n SOCK
</sxh>
\\
\\
\\
Show all statistics for current day:
<sxh bash>
sar -<option>
</sxh>
Show statistics 3 times with 1 second interval
<sxh bash>
sar -<option> 1 3
</sxh>
---------------------------------
Show **CPU statistics** 3 times with 1 second interval, (focus on the last field “%idle” to see the cpu load):
<sxh bash>
sar 1 3
</sxh>
=== CPU usage of ALL CPUs ===
<sxh bash>
sar -u 1 3
</sxh>
=== Load average ===
<sxh bash>
sar -q
</sxh>
===Swap Space===
<sxh bash>
sar -S
</sxh>
\\
==== Viewing specific time and date ====
Select a specific time during the day:
<sxh bash>
sar -<option> -s 10:30:00
</sxh>

<sxh bash>
sar -q -f /var/log/sa/sa23 -s 10:00:01
</sxh>
<sxh bash>
sar -p | grep -A5 "07:45"
</sxh>
\\
=== Finding every occurrence the load increased above the recommended amount ===
Change the value 4 to the number of CPUs you have
<sxh bash>
sar -q | awk '$5 > 4'
</sxh>
\\
=== Summary of logs ===
== RAM ==
<sxh bash>
for i in $(ls -tr /var/log/sa/sa[0-9][0-9]); do echo $(ls -l $i); sar -r -f $i | awk '$4 > 98.8'; done | awk '!/Average|Linux/'
</sxh>
== CPU ==
<sxh bash>
for i in $(ls -tr /var/log/sa/sa[0-9][0-9]); do echo $(ls -l $i); sar -u -f $i | awk '$8 > 20'; done | awk '!/Average|Linux/'
</sxh>
== load ==
<sxh bash>
load=$(grep -ic 'model name' /proc/cpuinfo ); for i in $(ls -1tr /var/log/sa/sa[0-3]*| grep -v '.bz2'); do echo "$(stat --printf='%.16y...' $i)"; sar -q -f $i | awk ' $6 > '"$load"' {print $0}' | grep -v 'Average\|x86'; echo ''; done
</sxh>
<sxh bash>
for i in $(ls -tr /var/log/sa/sa[0-9][0-9]); do echo $(ls -l $i); sar -q -f $i | awk '$5 > 1'; done | awk '!/Average|Linux/'
</sxh>
== Block Device I/O Activities ==
<sxh bash>
for i in $( ls -tr /var/log/sa/sa[0-9][0-9]); do echo $(ls -l $i ); sar -p -d | awk '$11 > 80'; done | awk '!/Average|Linux/'
</sxh>