With 10 minute samples anything that happened gets averaged enough that even the worst event is almost impossible to see.
Sar will report the same as date ie local time. And a 12:51 event would be in the 13:00 sample (started at about 12:50 and ended at 1300). What I do see is that during that window your io rate was about 2x prior 10 minute windows. With the 1 minute data we would be able to see if the disk was excessively busy. You average iops were about 10% of the disk capacity. I have debugged issues where the badly behaving IO was maxing out everything for 10sec on/10 sec off, in the 1 minute data there appeared to be nothing interesting to see (50% capacity), but it was playing hell with the interactive apps since during the 10 sec on window operations that the user was doing that were normally taking .5 sec were taking 1-2 seconds and so clearly slow for the users. With the sample size (60sec) close to the event size (45sec) it should be visible on 1 minute data, but less than clear on 10 minute data (9.25 minutes to average it out and hide/mask it). do "systemctl edit sysstat-collect.timer" And add this to the file: [Timer] OnCalendar=*:00/1 That will change it to 1minutes. if you do this: #!/bin/bash while [ true ] ; do export hour=$(date +%H) iostat -t -x 10 360 > filename.${hour} done that will give you 10 sec iostat data, and start a new file each hour, and overwrite the hour files the next day. On Sun, Oct 3, 2021 at 4:00 AM Terry Barnaby <ter...@beam.ltd.uk> wrote: > 45 second event happened at: 2021-10-02T11:51:02 UTC. Not sure what sar > time is based on (maybe local time BST rather than UTC so would be > 2021-10-02T12:51:02 > BST. > > Continuing info ... > > sar -n NFSD on the server > 11:00:01 24.16 0.00 24.16 0.00 24.16 > 0.00 0.00 0.35 1.48 2.07 21.08 > 11:10:01 21.13 0.00 21.13 0.00 21.13 > 0.00 0.00 0.28 0.89 1.72 19.58 > 11:20:02 17.85 0.00 17.85 0.00 17.85 > 0.00 0.00 0.27 0.69 0.82 16.65 > 11:30:02 20.66 0.00 20.66 0.00 20.66 > 0.00 0.00 0.29 0.83 1.42 19.15 > 11:40:02 39.80 0.00 39.80 0.00 39.80 > 0.00 0.00 0.89 2.05 3.67 25.51 > 11:50:02 35.40 0.00 35.40 0.00 35.40 > 0.00 0.00 0.39 0.65 1.22 18.21 > 12:00:02 41.85 0.00 41.85 0.00 41.85 > 0.00 0.00 0.84 1.14 2.08 20.50 > 12:10:02 38.54 0.00 38.54 0.00 38.54 > 0.00 0.00 0.48 0.82 1.48 19.62 > 12:20:02 39.85 0.00 39.85 0.00 39.85 > 0.00 0.00 0.37 1.50 1.29 19.44 > 12:30:02 39.84 0.00 39.84 0.00 39.84 > 0.00 0.00 0.70 1.03 2.28 19.78 > 12:40:02 38.29 0.00 38.29 0.00 38.29 > 0.00 0.00 0.46 0.81 1.26 19.37 > 12:50:02 71.38 0.00 71.38 0.00 71.37 > 0.00 0.00 1.12 2.41 8.19 34.87 > 13:00:00 77.46 0.00 77.46 0.00 77.45 > 0.00 0.00 1.43 3.30 7.36 38.31 > 13:10:00 67.62 0.00 67.63 0.00 67.62 > 0.00 0.00 3.85 2.84 4.68 29.66 > > sar -n SOCK on the server > 11:20:02 480 41 32 1 0 0 > 11:30:02 482 41 32 1 0 4 > 11:40:02 480 41 32 1 0 0 > 11:50:02 480 41 32 1 0 1 > 12:00:02 480 41 32 1 0 1 > 12:10:02 480 41 32 1 0 1 > 12:20:02 480 41 32 1 0 1 > 12:30:02 480 41 32 1 0 1 > 12:40:02 480 41 32 1 0 1 > > 12:40:02 totsck tcpsck udpsck rawsck ip-frag tcp-tw > 12:50:02 480 41 32 1 0 1 > 13:00:00 480 41 32 1 0 1 > 13:10:00 490 43 32 1 0 1 > > sar -n NFS on the client > 11:10:02 19.82 0.00 0.28 0.34 0.71 15.13 > 11:20:03 16.53 0.00 0.27 0.15 0.34 13.80 > 11:30:04 17.20 0.00 0.13 0.08 0.30 15.17 > 11:40:04 37.46 0.00 0.89 1.47 2.07 14.42 > 11:50:05 32.97 0.00 0.28 0.11 0.34 15.00 > 12:00:05 36.31 0.00 0.59 0.47 0.75 14.17 > 12:10:06 34.77 0.00 0.36 0.26 0.65 14.95 > 12:20:07 37.55 0.00 0.27 0.97 0.35 15.36 > 12:30:07 33.90 0.00 0.46 0.37 0.62 13.47 > 12:40:07 35.67 0.00 0.36 0.28 0.64 15.44 > 12:50:07 68.97 0.00 1.01 1.89 6.64 13.28 > 13:00:07 71.08 0.00 1.17 2.58 4.32 17.87 > 13:10:07 49.28 0.00 0.84 1.55 1.81 15.23 > 13:20:00 41.87 0.00 0.50 1.24 0.87 14.98 > > sar -n SOCK client > 11:20:03 1166 39 14 0 0 0 > 11:30:04 1164 35 14 0 0 2 > 11:40:04 1191 50 15 0 0 1 > 11:50:05 1182 40 14 0 0 0 > 12:00:05 1182 39 14 0 0 2 > 12:10:06 1182 39 14 0 0 3 > 12:20:07 1171 39 14 0 0 1 > 12:30:07 1179 40 15 0 0 0 > 12:40:07 1179 39 15 0 0 0 > 12:50:07 1200 45 17 0 0 1 > 13:00:07 1188 40 14 0 0 2 > > Nothing obvious I can see there ... > > Terry > > _______________________________________________ > users mailing list -- users@lists.fedoraproject.org > To unsubscribe send an email to users-le...@lists.fedoraproject.org > Fedora Code of Conduct: > https://docs.fedoraproject.org/en-US/project/code-of-conduct/ > List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines > List Archives: > https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org > Do not reply to spam on the list, report it: > https://pagure.io/fedora-infrastructure >
_______________________________________________ users mailing list -- users@lists.fedoraproject.org To unsubscribe send an email to users-le...@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/users@lists.fedoraproject.org Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure