目录

引入

sar是System Activity Reporter（系统活动情况报告）的缩写。sar工具将对系统当前的状态进行取样，然后通过计算数据和比例来表达系统的当前运行状态。它的特点是可以连续对系统取样，获得大量的取样数据；取样数据和分析的结果都可以存入文件，所需的负载很小。sar是目前Linux上最为全面的系统性能分析工具之一，可以从14个大方面对系统的活动进行报告，包括文件的读写情况、系统调用的使用情况、串口、CPU效率、内存、网络、磁盘使用状况、进程活动及IPC有关的活动等，使用也是较为复杂。
yum install sysstat #由sysstat提供。SYSSTAT是一个软件包sysstat工具包，包含监测系统性能及效率的一组工具，这些工具对于我们收集系统性能数据，比如CPU使用率、硬盘和网络吞吐数据，这些数据的收集和分析，有利于我们判断系统是否正常运行，是提高系统运行效率、安全运行服务器的得力助手
更多见github sysstat
sar是查看操作系统报告指标的各种工具中，最为普遍和方便的；它有两种用法；

  1. 追溯过去的统计数据（默认）
  2. 周期性的查看当前数据
  3. 日志记录在/var/log/sa/目录中的按日文件,文件为2进制，下面有打开命令示例，不指定-f参数时，打开当天的日志。

[root@centos77 ~]# ls -alh /var/log/sa/
total 3.4M
drwxr-xr-x. 2 root root   93 Mar 29 00:00 .
drwxr-xr-x. 9 root root 4.0K Mar 29 03:18 ..
-rw-r--r--. 1 root root 531K Mar 26 23:50 sa26
-rw-r--r--  1 root root 574K Mar 27 23:50 sa27
-rw-r--r--  1 root root 574K Mar 28 23:50 sa28
-rw-r--r--  1 root root 323K Mar 29 13:20 sa29
-rw-r--r--  1 root root 435K Mar 26 23:53 sar26
-rw-r--r--  1 root root 436K Mar 27 23:53 sar27
-rw-r--r--  1 root root 436K Mar 28 23:53 sar28



Dependencies Resolved

===========================================================================================================================
 Package                      Arch                Version                                       Repository            Size
===========================================================================================================================
Installing:
 sysstat                      x86_64              10.1.5-18.el7_7.1                             updates              315 k
Installing for dependencies:
 lm_sensors-libs              x86_64              3.4.0-8.20160601gitf9185e5.el7                base                  42 k

列说明
%user 用户模式下消耗的CPU时间的比例
%nice通过nice改变了进程调度优先级的进程，在用户模式下消耗的CPU时间的比例
%system系统模式下消耗的CPU时间的比例
%iowaitCPU等待磁盘I/O而导致空闲状态消耗时间的比例
%steal利用Xen等操作系统虚拟化技术时，等待其他虚拟CPU计算占用的时间比例
%idleCPU没有等待磁盘I/O等的空闲状态消耗的时间比例

注：

  1. 如果 %iowait 的值过高，表示硬盘存在I/O瓶颈
  2. 如果 %idle 的值高但系统响应慢时，有可能是 CPU 等待分配内存，此时应加大内存容量
  3. 如果 %idle 的值持续低于 10，则系统的 CPU 处理能力相对较低，表明系统中最需要解决的资源是 CPU。

使用实例

cpu负载统计

[root@centos76 ~]# sar -u
Linux 3.10.0-1062.el7.x86_64 (centos77)         03/29/2020      _x86_64_        (8 CPU)
# 每间隔10分钟
12:00:01 AM     CPU     %user     %nice   %system   %iowait    %steal     %idle
12:10:01 AM     all      0.20      0.00      0.22      0.00      0.00     99.57
12:20:01 AM     all      0.19      0.00      0.21      0.00      0.00     99.59
12:30:01 AM     all      0.19      0.00      0.23      0.00      0.00     99.58
12:40:01 AM     all      0.19      0.00      0.22      0.00      0.00     99.59
12:50:01 AM     all      0.19      0.00      0.22      0.00      0.00     99.58
01:00:01 AM     all      0.20      0.00      0.23      0.00      0.00     99.57
01:10:01 AM     all      0.19      0.00      0.22      0.01      0.00     99.58
01:20:01 AM     all      0.19      0.00      0.22      0.00      0.00     99.59
01:30:01 AM     all      0.19      0.00      0.22      0.00      0.00     99.59
01:40:01 AM     all      0.20      0.00      0.22      0.01      0.00     99.57



[root@centos77 ~]# sar -f /var/log/sa/sa29   #显示 cpu 统计
Linux 3.10.0-1062.el7.x86_64 (centos77)         03/29/2020      _x86_64_        (8 CPU)

12:00:01 AM     CPU     %user     %nice   %system   %iowait    %steal     %idle
12:10:01 AM     all      0.20      0.00      0.22      0.00      0.00     99.57
12:20:01 AM     all      0.19      0.00      0.21      0.00      0.00     99.59
12:30:01 AM     all      0.19      0.00      0.23      0.00      0.00     99.58
12:40:01 AM     all      0.19      0.00      0.22      0.00      0.00     99.59
12:50:01 AM     all      0.19      0.00      0.22      0.00      0.00     99.58
01:00:01 AM     all      0.20      0.00      0.23      0.00      0.00     99.57
01:10:01 AM     all      0.19      0.00      0.22      0.01      0.00     99.58
01:20:01 AM     all      0.19      0.00      0.22      0.00      0.00     99.59
[root@centos77 ~]# sar -P 2 5  # 单核cpu2，间隔5秒
Linux 3.10.0-1062.el7.x86_64 (centos77)         03/29/2020      _x86_64_        (8 CPU)

12:58:45 PM     CPU     %user     %nice   %system   %iowait    %steal     %idle
12:58:50 PM       2      0.20      0.00      0.40      0.00      0.00     99.40
12:58:55 PM       2      0.40      0.00      0.40      0.00      0.00     99.20
12:59:00 PM       2      0.20      0.00      0.20      0.00      0.00     99.60
12:59:05 PM       2      0.40      0.00      0.60      0.00      0.00     99.00
12:59:10 PM       2      0.20      0.00      0.40      0.00      0.00     99.40
^C

12:59:11 PM       2      0.55      0.00      0.55      0.00      0.00     98.90
Average:          2      0.30      0.00      0.41      0.00      0.00     99.29
[root@centos77 ~]# sar -P 2 1 5   # 单核cpu2 间隔1秒，显示5行。
Linux 3.10.0-1062.el7.x86_64 (centos77)         03/29/2020      _x86_64_        (8 CPU)

12:59:15 PM     CPU     %user     %nice   %system   %iowait    %steal     %idle
12:59:16 PM       2      0.00      0.00      1.00      0.00      0.00     99.00
12:59:17 PM       2      0.00      0.00      0.00      0.00      0.00    100.00
12:59:18 PM       2      0.99      0.00      0.99      0.00      0.00     98.02
^C
12:59:19 PM       2      0.00      0.00      0.00      0.00      0.00    100.00
Average:          2      0.25      0.00      0.51      0.00      0.00     99.24

内存使用统计

[root@centos77 ~]# sar -f /var/log/sa/sa29 -r   # 显示内存情况 
Linux 3.10.0-1062.el7.x86_64 (centos77)         03/29/2020      _x86_64_        (8 CPU)

12:00:01 AM kbmemfree kbmemused  %memused kbbuffers  kbcached  kbcommit   %commit  kbactive   kbinact   kbdirty
12:10:01 AM    195488   7959504     97.60        88   3279956  11000788    107.30   4242852   3284524       112
12:20:01 AM    194384   7960608     97.62        88   3280932  11000828    107.30   4245252   3284116       108
12:30:01 AM    192812   7962180     97.64        88   3281852  11000856    107.30   4246812   3284140       148
12:40:01 AM    192240   7962752     97.64        88   3282776  11000812    107.30   4248080   3284172        96
12:50:01 AM    187580   7967412     97.70        88   3283680  11005596    107.35   4252428   3284208       100
01:00:01 AM    178304   7976688     97.81        88   3284644  11025288    107.54   4257008   3284280       148
01:10:01 AM    197028   7957964     97.58        88   3277748  10999856    107.29   4235324   3291388        92
01:20:01 AM    195228   7959764     97.61        88   3278620  10999892    107.29   4237872   3291408       116
01:30:01 AM    194364   7960628     97.62        88   3279532  10998236    107.28   4238272   3290924       108
当天 
[root@centos77 ~]# sar -C -r
07:20:01 AM kbmemfree kbmemused  %memused kbbuffers  kbcached  kbcommit   %commit  kbactive   kbinact   kbdirty
07:30:01 AM    264872   7890120     96.75        88   3195060  10992792    107.22   4197820   3262464       116
07:40:01 AM    263960   7891032     96.76        88   3195984  10992800    107.22   4198964   3262496       124
07:50:01 AM    258444   7896548     96.83        88   3196920  10997496    107.27   4203168   3262532       112
08:00:01 AM    250852   7904140     96.92        88   3197864  11017004    107.46   4208392   3262572       144
..
12:10:01 PM    225168   7929824     97.24        88   3222560  10993756    107.23   4234252   3264212       108
12:20:01 PM    222852   7932140     97.27        88   3223596  10993728    107.23   4235876   3264280       120
12:30:02 PM    222732   7932260     97.27        88   3224556  10993764    107.23   4237528   3263764       100
12:40:01 PM    219664   7935328     97.31        88   3225500  10993756    107.23   4240088   3263056       120
Average:       234585   7920407     97.12        88   3224526  11004016    107.33   4217003   3272228       115
[root@centos76 ~]# free -hw
              total        used        free      shared     buffers       cache   available
Mem:           7.8G        4.3G        211M         24M         88K        3.2G        3.1G
Swap:          2.0G        581M        1.4G
[root@centos77 ~]# sar -C -r 1 5
Linux 3.10.0-1062.el7.x86_64 (centos77)         03/29/2020      _x86_64_        (8 CPU)

12:56:39 PM kbmemfree kbmemused  %memused kbbuffers  kbcached  kbcommit   %commit  kbactive   kbinact   kbdirty
12:56:40 PM    215864   7939128     97.35        88   3227076  10996984    107.27   4245524   3262840       128
12:56:41 PM    215864   7939128     97.35        88   3227076  10996984    107.27   4245524   3262840       128
12:56:42 PM    215848   7939144     97.35        88   3227084  10996984    107.27   4245536   3262840       140
12:56:43 PM    215848   7939144     97.35        88   3227084  10996984    107.27   4245536   3262840       140
12:56:44 PM    215864   7939128     97.35        88   3227088  10996984    107.27   4245536   3262844       144
Average:       215858   7939134     97.35        88   3227082  10996984    107.27   4245531   3262841       136

列 说明
kbmemfree空闲物理内存量
kbmemused使用中的物理内存量
%memused物理内存量使用率
kbbuffers内核中作为缓冲区使用的物理内存容量
kbcacheed内核中作为缓存使用的物理内存容量
kbswpfree交换区的空闲容量
kbswpused使用中的交换区容量

swap使用统计

[root@centos77 ~]# sar -f /var/log/sa/sa29 -W
Linux 3.10.0-1062.el7.x86_64 (centos77)         03/29/2020      _x86_64_        (8 CPU)

12:00:01 AM  pswpin/s pswpout/s
12:10:01 AM      0.00      0.00
12:20:01 AM      0.01      0.00
12:30:01 AM      0.01      0.00
12:40:01 AM      0.00      0.00
12:50:01 AM      0.00      0.00
01:00:01 AM      0.01      0.00
01:10:01 AM      0.00      0.00
01:20:01 AM      0.00      0.00
01:30:01 AM      0.00      0.00
...
Average:         0.00      0.00

网络带宽

#sar -f /var/log/sa/sa29 -r -n DEV
12:00:01 PM     IFACE   rxpck/s   txpck/s    rxkB/s    txkB/s   rxcmp/s   txcmp/s  rxmcst/s
12:10:01 PM     ens34      0.64      0.10      0.05      0.01      0.00      0.00      0.00
12:10:01 PM        lo     45.03     45.03      8.01      8.01      0.00      0.00      0.00
12:10:01 PM     ens33      3.01      2.36      0.22      0.21      0.00      0.00      0.00
...
12:40:01 PM   docker0      0.00      0.00      0.00      0.00      0.00      0.00      0.00
Average:        ens34      0.53      0.10      0.04      0.01      0.00      0.00      0.00
Average:           lo     44.37     44.37      7.81      7.81      0.00      0.00      0.00
Average:        ens33      2.86      2.30      0.22      0.21      0.00      0.00      0.00
Average:      docker0      0.00      0.00      0.00      0.00      0.00      0.00      0.00

缓存

[root@centos77 ~]# sar -b    
Linux 3.10.0-1062.el7.x86_64 (centos77)         03/29/2020      _x86_64_        (8 CPU)

12:00:01 AM       tps      rtps      wtps   bread/s   bwrtn/s
12:10:01 AM      1.04      0.00      1.04      0.00     17.76
12:20:01 AM      0.89      0.01      0.89      0.31     15.04

07:20:01 AM       tps      rtps      wtps   bread/s   bwrtn/s
...
12:50:01 PM      0.92      0.00      0.92      0.07     19.91
Average:         0.92      0.00      0.92      0.29     15.45
[root@centos77 ~]# sar -b 1 5   # 实时显示5行，间隔1秒
Linux 3.10.0-1062.el7.x86_64 (centos76)         03/29/2020      _x86_64_        (8 CPU)

12:55:23 PM       tps      rtps      wtps   bread/s   bwrtn/s
12:55:24 PM      0.00      0.00      0.00      0.00      0.00
12:55:25 PM      0.00      0.00      0.00      0.00      0.00
12:55:26 PM      0.00      0.00      0.00      0.00      0.00
12:55:27 PM      0.00      0.00      0.00      0.00      0.00
12:55:28 PM      0.00      0.00      0.00      0.00      0.00
Average:         0.00      0.00      0.00      0.00      0.00

主要参数大类

详见附录

sysstat服务

[root@centos76 ~]# systemctl status sysstat
● sysstat.service - Resets System Activity Logs
   Loaded: loaded (/usr/lib/systemd/system/sysstat.service; enabled; vendor preset: enabled)
   Active: active (exited) since Thu 2020-03-26 20:14:57 CST; 2 days ago
 Main PID: 1000 (code=exited, status=0/SUCCESS)
    Tasks: 0
   Memory: 0B
   CGroup: /system.slice/sysstat.service

Mar 26 20:14:57 centos76 systemd[1]: Starting Resets System Activity Logs...
Mar 26 20:14:57 centos76 systemd[1]: Started Resets System Activity Logs.
You have new mail in /var/mail/root
[root@centos76 ~]# journalctl -u sysstat
-- Logs begin at Thu 2020-03-26 20:14:49 CST, end at Sun 2020-03-29 12:50:18 CST. --
Mar 26 20:14:57 centos76 systemd[1]: Starting Resets System Activity Logs...
Mar 26 20:14:57 centos76 systemd[1]: Started Resets System Activity Logs.

更多

man sar 

EXAMPLES
       sar -u 2 5
              Report CPU utilization for each 2 seconds. 5 lines are displayed.

       sar -I 14 -o int14.file 2 10
              Report statistics on IRQ 14 for each 2 seconds. 10 lines are displayed.  Data are stored in a file called
              int14.file.

       sar -r -n DEV -f /var/log/sa/sa16
              Display memory and network statistics saved in daily data file 'sa16'.

       sar -A
              Display all the statistics saved in current daily data file.

附录

sysstat工具包

iostat 工具提供CPU使用率及硬盘吞吐效率的数据；  #比较核心的工具
mpstat 工具提供单个处理器或多个处理器相关数据；
pidstat: 关于运行中的进程/任务、CPU、内存等的统计信息
sar 工具负责收集、报告并存储系统活跃的信息；    #统计数据的核心工具
sa1 工具负责收集并存储每天系统动态信息到一个二进制的文件中。它是通过计划任务工具cron来运行，是为sadc所设计的程序前端程序；
sa2工具负责把每天的系统活跃性息写入总结性的报告中。它是为sar所设计的前端 ，要通过cron来调用
sadc 是系统动态数据收集工具，收集的数据被写一个二进制的文件中，它被用作sar工具的后端；
sadf 显示被sar通过多种格式收集的数据；
nfsiostat: NFS（Network File System）的I/O统计信息。
cifsiostat: CIFS(Common Internet File System)的统计信息

[root@centos76 ~]# rpm -ql sysstat
/etc/cron.d/sysstat
/etc/sysconfig/sysstat
/etc/sysconfig/sysstat.ioconf
/usr/bin/cifsiostat
/usr/bin/iostat
/usr/bin/mpstat
/usr/bin/nfsiostat-sysstat
/usr/bin/pidstat
/usr/bin/sadf
/usr/bin/sar
/usr/bin/tapestat
/usr/lib/systemd/system/sysstat.service
/usr/lib64/sa
/usr/lib64/sa/sa1
/usr/lib64/sa/sa2
/usr/lib64/sa/sadc
/usr/share/doc/sysstat-10.1.5
/usr/share/doc/sysstat-10.1.5/CHANGES
/usr/share/doc/sysstat-10.1.5/COPYING
/usr/share/doc/sysstat-10.1.5/CREDITS
/usr/share/doc/sysstat-10.1.5/FAQ
/usr/share/doc/sysstat-10.1.5/README
/usr/share/doc/sysstat-10.1.5/sysstat-10.1.5.lsm
/usr/share/locale/af/LC_MESSAGES/sysstat.mo
/usr/share/locale/cs/LC_MESSAGES/sysstat.mo
/usr/share/locale/da/LC_MESSAGES/sysstat.mo
/usr/share/locale/de/LC_MESSAGES/sysstat.mo
/usr/share/locale/eo/LC_MESSAGES/sysstat.mo
/usr/share/locale/es/LC_MESSAGES/sysstat.mo
/usr/share/locale/eu/LC_MESSAGES/sysstat.mo
/usr/share/locale/fi/LC_MESSAGES/sysstat.mo
/usr/share/locale/fr/LC_MESSAGES/sysstat.mo
/usr/share/locale/hr/LC_MESSAGES/sysstat.mo
/usr/share/locale/id/LC_MESSAGES/sysstat.mo
/usr/share/locale/it/LC_MESSAGES/sysstat.mo
/usr/share/locale/ja/LC_MESSAGES/sysstat.mo
/usr/share/locale/ky/LC_MESSAGES/sysstat.mo
/usr/share/locale/lv/LC_MESSAGES/sysstat.mo
/usr/share/locale/mt/LC_MESSAGES/sysstat.mo
/usr/share/locale/nb/LC_MESSAGES/sysstat.mo
/usr/share/locale/nl/LC_MESSAGES/sysstat.mo
/usr/share/locale/nn/LC_MESSAGES/sysstat.mo
/usr/share/locale/pl/LC_MESSAGES/sysstat.mo
/usr/share/locale/pt/LC_MESSAGES/sysstat.mo
/usr/share/locale/pt_BR/LC_MESSAGES/sysstat.mo
/usr/share/locale/ro/LC_MESSAGES/sysstat.mo
/usr/share/locale/ru/LC_MESSAGES/sysstat.mo
/usr/share/locale/sk/LC_MESSAGES/sysstat.mo
/usr/share/locale/sr/LC_MESSAGES/sysstat.mo
/usr/share/locale/sv/LC_MESSAGES/sysstat.mo
/usr/share/locale/uk/LC_MESSAGES/sysstat.mo
/usr/share/locale/vi/LC_MESSAGES/sysstat.mo
/usr/share/locale/zh_CN/LC_MESSAGES/sysstat.mo
/usr/share/locale/zh_TW/LC_MESSAGES/sysstat.mo
/usr/share/man/man1/cifsiostat.1.gz
/usr/share/man/man1/iostat.1.gz
/usr/share/man/man1/mpstat.1.gz
/usr/share/man/man1/nfsiostat-sysstat.1.gz
/usr/share/man/man1/pidstat.1.gz
/usr/share/man/man1/sadf.1.gz
/usr/share/man/man1/sar.1.gz
/usr/share/man/man1/tapestat.1.gz
/usr/share/man/man5/sysstat.5.gz
/usr/share/man/man8/sa1.8.gz
/usr/share/man/man8/sa2.8.gz
/usr/share/man/man8/sadc.8.gz
/var/log/sa

man_sar

SAR(1)                                            Linux User's Manual                                            SAR(1)



NAME
       sar - Collect, report, or save system activity information.

SYNOPSIS
       sar [ -A ] [ -B ] [ -b ] [ -C ] [ -d ] [ -F ] [ -H ] [ -h ] [ -p ] [ -q ] [ -R ] [ -r ] [ -S ] [ -t ] [ -u [ ALL
       ] ] [ -V ] [ -v ] [ -W ] [ -w ] [ -y ] [ -I { int [,...] | SUM | ALL | XALL } ] [ -P { cpu [,...] | ALL } ] [ -m
       {  keyword  [,...]  |  ALL  } ] [ -n { keyword [,...] | ALL } ] [ -j { ID | LABEL | PATH | UUID | ... } ] [ -f [
       filename ] | -o [ filename ] | -[0-9]+ ] [ -i interval ] [ -s [ hh:mm:ss ] ] [ -e [ hh:mm:ss ] ]  [  interval  [
       count ] ]

DESCRIPTION
       The sar command writes to standard output the contents of selected cumulative activity counters in the operating
       system. The accounting system, based on the values in the count and interval parameters, writes information  the
       specified  number  of  times  spaced at the specified intervals in seconds.  If the interval parameter is set to
       zero, the sar command displays the average statistics for the time since the system was started. If the interval
       parameter is specified without the count parameter, then reports are generated continuously.  The collected data
       can also be saved in the file specified by the -o filename flag, in addition to being displayed onto the screen.
       If  filename is omitted, sar uses the standard system activity daily data file, the /var/log/sa/sadd file, where
       the dd parameter indicates the current day.  By default all the data available from the kernel are saved in  the
       data file.

       The  sar  command  extracts  and  writes to standard output records previously saved in a file. This file can be
       either the one specified by the -f flag or, by default, the standard system activity daily  data  file.   It  is
       also  possible to enter -1, -2 etc. as an argument to sar to display data of that days ago. For example, -1 will
       point at the standard system activity file of yesterday.

       Without the -P flag, the sar command reports system-wide (global among all  processors)  statistics,  which  are
       calculated  as averages for values expressed as percentages, and as sums otherwise. If the -P flag is given, the
       sar command reports activity which relates to the specified processor or processors. If -P ALL is given, the sar
       command reports statistics for each individual processor and global statistics among all processors.

       You  can  select information about specific system activities using flags. Not specifying any flags selects only
       CPU activity.  Specifying the -A flag selects all possible activities.

       The default version of the sar command (CPU utilization report) might be one of the first  facilities  the  user
       runs  to  begin system activity investigation, because it monitors major system resources. If CPU utilization is
       near 100 percent (user + nice + system), the workload sampled is CPU-bound.

       If multiple samples and multiple reports are desired, it is convenient to specify an output  file  for  the  sar
       command.  Run the sar command as a background process. The syntax for this is:

       sar -o datafile interval count >/dev/null 2>&1 &

       All data are captured in binary form and saved to a file (datafile).  The data can then be selectively displayed
       with the sar command using the -f option. Set the interval and count  parameters  to  select  count  records  at
       interval  second  intervals.  If  the  count  parameter  is  not  set, all the records saved in the file will be
       selected.  Collection of data in this manner is useful to characterize system usage over a period  of  time  and
       determine peak usage hours.

       Note:     The sar command only reports on local activities.


OPTIONS
       -A     This is equivalent to specifying -bBdFHqrRSuvwWy -I SUM -I XALL -m ALL -n ALL -u ALL -P ALL.
       -B     Report paging statistics.  The following values are displayed:
       -b     Report I/O and transfer rate statistics.  The following values are displayed:
       -C     When reading data from a file, tell sar to display comments that have been inserted by sadc.
       -d     Report activity for each block device.  When data are displayed, the device specification dev m-n is gen‐
              erally used ( DEV column).  m is the major number of the device and n its minor number.  Device names may
              also be pretty-printed if option -p is used or persistent device names can be printed  if  option  -j  is
              used  (see  below).   Note that disk activity depends on sadc options "-S DISK" and "-S XDISK" to be col‐
              lected. The following values are displayed:
       -e [ hh:mm:ss ]
              Set  the  ending  time of the report. The default ending time is 18:00:00. Hours must be given in 24-hour
              format.  This option can be used when data are read from or written to a file (options -f or -o).

       -F [ MOUNT ]
              Display statistics for currently mounted filesystems. Pseudo-filesystems are ignored.  At the end of  the
              report,  sar will display a summary of all those filesystems.  Note that filesystems statistics depend on
              sadc option -S XDISK to be collected.  Use of the MOUNT parameter keyword indicates that mountpoint  will
              be reported instead of filesystem device.  [行表统计]

       -f [ filename ]
              Extract records from filename (created by the -o filename flag). The default value of the filename param‐
              eter is the current daily data file, the /var/log/sa/sadd file. The -f option  is  exclusive  of  the  -o
              option.

       -H     Report hugepages utilization statistics.  The following values are displayed: [行表统计]

       -h     Display a short help message then exit.

       -I { int [,...] | SUM | ALL | XALL }
              Report statistics for a given interrupt.  int is the interrupt number. Specifying multiple -I int parame‐
              ters on the command line will look at multiple independent interrupts.  The SUM  keyword  indicates  that
              the  total  number  of  interrupts received per second is to be displayed. The ALL keyword indicates that
              statistics from the first 16 interrupts are to be reported, whereas the XALL keyword indicates that  sta‐
              tistics  from  all interrupts, including potential APIC interrupt sources, are to be reported.  Note that
              interrupt statistics depend on sadc option "-S INT" to be collected.

       -i interval
              Select data records at seconds as close as possible to the number specified by the interval parameter.

       -j { ID | LABEL | PATH | UUID | ... }
              Display persistent device names. Use this option in conjunction with option -d.  Options ID, LABEL,  etc.
              specify  the type of the persistent name. These options are not limited, only prerequisite is that direc‐
              tory with required persistent names is present in /dev/disk.  If persistent name is  not  found  for  the
              device, the device name is pretty-printed (see option -p below).

       -m { keyword [,...] | ALL }
              Report  power  management  statistics.  Note that these statistics depend on sadc option "-S POWER" to be
              collected.

              Possible keywords are CPU, FAN, FREQ, IN, TEMP and USB.

              With the CPU keyword, statistics about CPU are reported.  The following value is displayed:

               [行表统计]
       -n { keyword [,...] | ALL }
              Report network statistics.

              Possible keywords are DEV, EDEV, NFS, NFSD, SOCK, IP, EIP, ICMP, EICMP, TCP, ETCP, UDP, SOCK6, IP6, EIP6,
              ICMP6, EICMP6 and UDP6.

              With  the  DEV  keyword, statistics from the network devices are reported.  The following values are dis‐
              played: [非常细分的行表统计]
       -o [ filename ]  #保存到文件
              Save the readings in the file in binary form. Each reading is in a separate record. The default value  of
              the filename parameter is the current daily data file, the /var/log/sa/sadd file. The -o option is exclu‐
              sive of the -f option.  All the data available from the kernel are saved in the file (in fact, sar  calls
              its data collector sadc with the option "-S ALL". See sadc(8) manual page).

       -P { cpu [,...] | ALL }
              Report  per-processor  statistics  for the specified processor or processors.  Specifying the ALL keyword
              reports statistics for each individual processor, and globally for all processors.  Note that processor 0
              is the first processor. [行表统计]

       -p     Pretty-print  device  names. Use this option in conjunction with option -d.  By default names are printed
              as dev m-n where m and n are the major and minor numbers for the device.  Use of this option displays the
              names of the devices as they (should) appear in /dev. Name mappings are controlled by /etc/sysconfig/sys‐
              stat.ioconf. [行表统计]

       -q     Report queue length and load averages. The following values are displayed: [行表统计]
       -R     Report memory statistics. The following values are displayed: [行表统计]
       -r     Report memory utilization statistics.  The following values are displayed: [行表统计]
       -S     Report swap space utilization statistics.  The following values are displayed: [行表统计]
       -s [ hh:mm:ss ]
              Set  the starting time of the data, causing the sar command to extract records time-tagged at, or follow‐
              ing, the time specified. The default starting time is 08:00:00.  Hours must be given in  24-hour  format.
              This option can be used only when data are read from a file (option -f ).

       -t     When reading data from a daily data file, indicate that sar should display the timestamps in the original
              local time of the data file creator. Without this option, the sar command displays the timestamps in  the
              user's locale time.

       -u [ ALL ]
              Report  CPU  utilization.  The  ALL  keyword  indicates that all the CPU fields should be displayed.  The
              report may show the following fields: [行表统计]
       -V     Print version number then exit.
       -v     Report status of inode, file and other kernel tables.  The following values are displayed: [行表统计]
       -W     Report swapping statistics. The following values are displayed: [行表统计]
       -w     Report task creation and system switching activity. [行表统计]
       -y     Report TTY device activity. The following values are displayed: [行表统计]

ENVIRONMENT
       The sar command takes into account the following environment variables:


       S_TIME_FORMAT
              If  this  variable  exists and its value is ISO then the current locale will be ignored when printing the
              date in the report header.  The sar command will use the ISO 8601 format (YYYY-MM-DD) instead.


       S_TIME_DEF_TIME
              If this variable exists and its value is UTC then sar will save its data in UTC time (data will still  be
              displayed  in  local  time).   sar  will also use UTC time instead of local time to determine the current
              daily data file located in the /var/log/sa directory. This variable may be useful for servers with  users
              located across several timezones.

EXAMPLES
       sar -u 2 5
              Report CPU utilization for each 2 seconds. 5 lines are displayed.

       sar -I 14 -o int14.file 2 10
              Report statistics on IRQ 14 for each 2 seconds. 10 lines are displayed.  Data are stored in a file called
              int14.file.

       sar -r -n DEV -f /var/log/sa/sa16
              Display memory and network statistics saved in daily data file 'sa16'.

       sar -A
              Display all the statistics saved in current daily data file.

BUGS
       /proc filesystem must be mounted for the sar command to work.

       All the statistics are not necessarily available, depending on the kernel version used.  sar  assumes  that  you
       are using at least a 2.6 kernel.

FILES
       /var/log/sa/sadd
              Indicate the daily data file, where the dd parameter is a number representing the day of the month.

       /proc contains various files with system statistics.

AUTHOR
       Sebastien Godard (sysstat <at> orange.fr)

SEE ALSO
       sadc(8), sa1(8), sa2(8), sadf(1), pidstat(1), mpstat(1), iostat(1), vmstat(8)

       http://pagesperso-orange.fr/sebastien.godard/



Linux                                                SEPTEMBER 2012                                              SAR(1)

kSar使用

  1. kSar为jar程序，需要要java8以上版本
  2. 打开jar主程序
    • java.exe -jar ksar-5.2.4-b325_gdea8d8b5-SNAPSHOT-all.jar
  3. 数据准备：将sar当前或某天的元数据进行文本化输出，ksar只识别纯文本。不认二进制源文件，可以支持多个文本文件追加显统计。可以导出生成图形为图片。
    • 在kSar程序中选择Data，导入（load）或追加（Append）以上转换的纯文本文件。支持多窗口（File-->new windows）。即可查看。更多参考附录中的链接referto 4。
java.exe -jar ksar-5.2.4-b325_gdea8d8b5-SNAPSHOT-all.jar 
sar -A  > /tmp/sar.data.txt
sar -f /var/log/sa/sa29 -A  > /tmp/sa29.txt

kSar自动加载服务器sa日志

截止目前版本kSar支持直接连接服务器获取sa日志，不用再手动
Data—> 选择ssh连接到相应的服务器直接读取（当然不是读取二进制的源文件，而是如图用sar -A 进行输出，不用我们再手动执行命令转换后导入生成数据了。

  1. 用途1：直接将第3方服务器上的sa日志，放在测试服务器上的/var/log/sa目录下，即可用此ssh方式自动生成图表，尤其适用于日志天数比较多的场景。

Referto

http://sebastien.godard.pagesperso-orange.fr/
https://github.com/sysstat/sysstat
https://github.com/vlsi/ksar #可视化图形工具，依赖java，但重点推荐新手，只需要将/var/log/sa/下载后，用kSar导入查看，完全图表式的检查，一用便停不下来
https://zhuanlan.zhihu.com/p/34223218
https://www.linuxidc.com/Linux/2019-08/160082.htm