Monitoring user logins, process and server load using SAR.

[vrk]

Hello,

Can you please explain how to monitor user logins,process and server load using SAR. And im using RHEL-6 and Oracle linux.

Thanks
ranjit

[Rubberman]

SAR monitoring logins? Not possible. Server load, not a problem. Read the man page for sar. We use it extensively to help with system/network diagnostics.

[tdsan]

Hello,

Can you please explain how to monitor user logins,process and server load using SAR. And im using RHEL-6 and Oracle linux.

Thanks
ranjit

One way you can view who has failed would be to use faillog command

faillog -a # lists all the failed login attempts
faillog -u <user> # lists the failed login attempts for a specific user
faillog -r # resets the failed login counters

Maybe this can help with the process

Also the who command works pretty well:

who -a # this lists all the users logged on the system

ps -aux # provides information on specific user processes
top -d 3 # identifies user processes in real-time but gives the user the ability to manipulate the fields as needed / server load can be monitored as well

Let me know if this helps.

tdsan

[vrk]

thanks for the information
tdsan

[Rubberman]

thanks for the information
tdsan

Yes. Very useful post tdsan. I wasn't aware of that command. Vrk, do note that if there have been no failed login attempts that you will get an error "Cannot open /var/log/faillog: No such file or directory" running it.