I am trying to understand the network activity from a few servers along with CPU utilization for 48 hours only. I am new to sar and maybe i am not writing the syntax correctly.
sar %util -n ALL eth0 -e[48:00:00] -f /tmp/piyush
A couple of things.
1.) eth0 isn't an option for -n. You can use ALL or a number of other items, look at man sar for a list. -n ALL, would output all network stats.
2.) -e 48:00:00, this will never work, -e signifies the ending time, there is no 48:00:00 o'clock. 23:59:59 is the highest you can get.
3.) %util is only a field displayed by -d. not an option.
so you're actually looking for something like
For instance, if i wanted 09:00 on 3/1/2013 through 09:00 3/3/2013. I'd need to use the file for 3/1/2013 and -s 09:00:00, and then get all data for the file for 3/2, and an ending time of -e 09:00:00 for 3/3.
answered 06 Mar '13, 23:45