Ubuntu Manpage: sadf - Display data collected by sar in multiple formats.

Provided by: sysstat_11.6.1-1ubuntu0.2_amd64

NAME

       sadf - Display data collected by sar in multiple formats.

SYNOPSIS

       sadf  [  -C ] [ -c | -d | -g | -j | -p | -r | -x ] [ -H ] [ -h ] [ -T | -t | -U ] [ -V ] [
       -O opts [,...] ] [ -P { cpu_list | ALL } ] [ -s [ hh:mm[:ss] ] ] [ -e [ hh:mm[:ss] ]  ]  [
       -- sar_options ] [ interval [ count ] ] [ datafile | -[0-9]+ ]

DESCRIPTION

The sadf command is used for displaying the contents of data files created by the sar(1)
command. But unlike sar, sadf can write its data in many different formats (CSV, XML,
etc.) The default format is one that can easily be handled by pattern processing commands
like awk (see option -p). The sadf command can also be used to draw graphs for the
various activities collected by sar and display them as SVG (Scalable Vector Graphics)
graphics in your web browser (see option -g).

The sadf command extracts and writes to standard output records saved in the datafile
file. This file must have been created by a version of sar which is compatible with that
of sadf. If datafile is omitted, sadf uses the standard system activity daily data file.
It is also possible to enter -1, -2 etc. as an argument to sadf to display data of that
days ago. For example, -1 will point at the standard system activity file of yesterday.

The standard system activity daily data file is named saDD or saYYYYMMDD, where YYYY
stands for the current year, MM for the current month and DD for the current day. sadf
will look for the most recent of saDD and saYYYYMMDD, and use it. By default it is located
in the /var/log/sysstat directory. Yet it is possible to specify an alternate location for
it: If datafile is a directory (instead of a plain file) then it will be considered as the
directory where the standard system activity daily data file is located.

The interval and count parameters are used to tell sadf to select count records at
interval seconds apart. If the count parameter is not set, then all the records saved in
the data file will be displayed.

All the activity flags of sar may be entered on the command line to indicate which
activities are to be reported. Before specifying them, put a pair of dashes (--) on the
command line in order not to confuse the flags with those of sadf. Not specifying any
flags selects only CPU activity.

OPTIONS

-C Tell sadf to display comments present in file.

-c Convert an old system activity binary datafile (version 9.1.6 and later) to current
up-to-date format. Use the following syntax:

sadf -c old_datafile > new_datafile

-d Print the contents of the data file in a format that can easily be ingested by a
relational database system. The output consists of fields separated by a semicolon.
Each record contains the hostname of the host where the file was created, the
interval value (or -1 if not applicable), the timestamp in a form easily acceptable
by most databases, and additional semicolon separated data fields as specified by
sar_options command line options. Note that timestamp output can be controlled by
options -T, -t and -U.

-e [ hh:mm[:ss] ]
Set the ending time of the report, given in local time. The default ending time is
18:00:00. Hours must be given in 24-hour format.

-g Print the contents of the data file in SVG (Scalable Vector Graphics) format. This
option enables you to display some fancy graphs in your web browser. Use the
following syntax:

sadf -g your_datafile [ -- sar_options ] > output.svg

and open the resulting SVG file in your favorite web browser.

-H Display only the header of the report (when applicable). If no format has been
specified, then the header data (metadata) of the data file are displayed.

-h When used in conjunction with option -d, all activities will be displayed
horizontally on a single line.

-j Print the contents of the data file in JSON (JavaScript Object Notation) format.
Timestamps can be controlled by options -T and -t.

-O opts [,...]
Use the specified options to control the output of sadf. The following options are
used to control SVG output displayed by sadf -g:

autoscale
Draw all the graphs of a given view as large as possible based on current
view's scale. To do this, a factor (10, 100, 1000...) is used to enlarge the
graph drawing. This option may be interesting when several graphs are drawn
on the same view, some with only very small values, and others with high
ones, the latter making the former hardly visible.

height=value
Set SVG canvas height to value.

oneday
Display graphs data over a period of 24 hours. Note that hours are still
printed in UTC by default: You should use option -T to print them in local
time and get a time window starting from midnight.

packed
Group all views from the same activity (and for the same device) on the same
row.

showidle
Also display %idle state in graphs for CPU statistics.

showinfo
Display additional information (such as the date and the host name) on each
view.

skipempty
Do not display views where all graphs have only zero values.

The following option is used to control raw output displayed by sadf -r:

showhints
Display additional noteworthy information, such as e.g., a monotonic counter
value which has decreased.

-P { cpu_list | ALL }
Tell sadf that processor dependent statistics are to be reported only for the
specified processor or processors. cpu_list is a list of comma-separated values or
range of values (e.g., 0,2,4-7,12-). Note that processor 0 is the first processor,
and processor all is the global average among all processors. Specifying the ALL
keyword reports statistics for each individual processor, and globally for all
processors.

-p Print the contents of the data file in a format that can easily be handled by
pattern processing commands like awk. The output consists of fields separated by a
tab. Each record contains the hostname of the host where the file was created, the
interval value (or -1 if not applicable), the timestamp, the device name (or - if
not applicable), the field name and its value. Note that timestamp output can be
controlled by options -T, -t and -U.

-r Print the raw contents of the data file. With this format, the values for all the
counters are displayed as read from the kernel, which means e.g., that no average
values are calculated over the elapsed time interval.

-s [ hh:mm[:ss] ]
Set the starting time of the data (given in local time), causing the sadf command
to extract records time-tagged at, or following, the time specified. The default
starting time is 08:00:00. Hours must be given in 24-hour format.

-T Display timestamp in local time instead of UTC (Coordinated Universal Time).

-t Display timestamp in the original local time of the data file creator instead of
UTC (Coordinated Universal Time).

-U Display timestamp (UTC - Coordinated Universal Time) in seconds from the epoch.

-V Print version number then exit.

-x Print the contents of the data file in XML format. Timestamps can be controlled by
options -T and -t. The corresponding DTD (Document Type Definition) and XML Schema
are included in the sysstat source package. They are also available at
http://pagesperso-orange.fr/sebastien.godard/download.html

ENVIRONMENT

       The sadf command takes into account the following environment variable:

       S_TIME_DEF_TIME
              If this variable exists and its value is UTC then sadf will use UTC time instead of
              local time to determine the current daily data file located in the /var/log/sysstat
              directory.

EXAMPLES

       sadf -d /var/log/sysstat/sa21 -- -r -n DEV
              Extract memory and network statistics from system activity file 'sa21', and display
              them in a format that can be ingested by a database.

       sadf -p -P 1
              Extract CPU statistics for processor 1 (the second processor)  from  current  daily
              data  file,  and  display  them in a format that can easily be handled by a pattern
              processing command.

BUGS

       SVG output (as created by option -g) is fully compliant with SVG 1.1  standard.   Graphics
       have  been  successfully  displayed in various web browsers, including Firefox, Chrome and
       Opera. Yet SVG rendering is broken on Microsoft browsers (tested on Internet  Explorer  11
       and Edge 13.1): So please don't use them.

FILES

       /var/log/sysstat/saDD
       /var/log/sysstat/saYYYYMMDD
              The  standard  system  activity  daily data files and their default location.  YYYY
              stands for the current year, MM for the current month and DD for the current day.

AUTHOR

       Sebastien Godard (sysstat <at> orange.fr)