Generating System Accounting Reports

AIX Version 4.3 System Management Guide: Operating System and Devices

Generating System Accounting Reports

Once accounting has been configured on the system, daily and monthly reports are generated. The runacct command produces the daily reports and the monact command produces the monthly reports.

Daily Accounting Reports

To generate a daily report, use the runacct command. This command summarizes data into an ASCII file named /var/adm/acct/sum/rprtMMDD. MMDD specifies the month and day the report is run. The report covers the following:

Daily Report
Daily Usage Report
Daily Command Summary
Monthly Total Command Summary
Last Login

Daily Report

The first line of the Daily Report begins with the start and finish times for the data collected in the report, a list of system-level events including any existing shutdowns, reboots, and run-level changes. The total duration is also listed indicating the total number of minutes included within the accounting period (usually 1440 minutes, if the report is run every 24 hours). The report contains the following information:

LINE	Console, tty, or pty In use.
MINUTES	Total number of minutes the line was in use.
PERCENT	Percentage of time in the accounting period that the line was in use.
# SESS	Number of new login sessions started.
# ON	Same as # SESS.
# OFF	Number of logouts plus interrupts made on the line.

Daily Usage Report

The Daily Usage Report is a summarized report of system usage per user ID during the accounting period. Some fields are divided into prime and non-prime time, as defined by the accounting administrator in /usr/lib/acct/holidays. The report contains the following information:

UID	User ID.
LOGIN NAME	User name.
CPU (PRIME/NPRIME)	Total CPU time for all of the user's processes in minutes.
KCORE (PRIME/NPRIME)	Total memory used by running processes, in kilobyte-minutes.
CONNECT (PRIME/NPRIME)	Total connect time (how long the user was logged in) in minutes.
DISK BLOCKS	Average total amount of disk space used by the user on all filesystems that accounting is enabled for.
FEES	Total fees entered with chargefee command.
# OF PROCS	Total number of processes belonging to this user.
# OF SESS	Number of distinct login sessions for this user.
# DISK SAMPLES	Number of times disk samples were run during the accounting period. If no DISK BLOCKS are owned the value will be zero.

Daily Command Summary

The Daily Command Summary report shows each comand executed during the accounting period, with one line per each unique command name. The table is sorted by TOTAL KCOREMIN (described below), with the first line including the total information for all commands. The data listed for each command is cumulative for all executions of the command during the accounting period. The columns in this table include the following information:

COMMAND NAME	Command that was executed.
NUMBER CMDS	Number of times the command executed.
TOTAL KCOREMIN	Total memory used by running the command, in kilobyte-minutes.
TOTAL CPU-MIN	Total CPU time used by the command in minutes.
TOTAL REAL-MIN	Total real time elapsed for the command in minutes.
MEAN SIZE-K	Mean size of memory used by the command per CPU minute.
MEAN CPU-MIN	Mean numbr of CPU minutes per execution of the command.
HOG FACTOR	Measurement of how much the command hogs the CPU while it is active. It is the ratio of TOTAL CPU-MIN over TOTAL REAL-MIN.
CHARS TRNSFD	Number of characters transferred by the command with system reads and writes.
BLOCKS READ	Number of physical block reads and writes performed by the command.

Monthly Total Command Summary

The Monthly Total Comand Summary provides information about all commands that executed since the previous monthly report using the monacct command. The fields and information mean the same as those in the Daily Command Summary.

Last Login

The Last Login report displays two fields for each user ID. The first field is YY-MM-DD and indicates the most recent login for the specified user. The second field is the name of the user account. A date field of 00-00-00 indicates that the user ID has never logged in.

Fiscal Accounting Reports

The Fiscal Accounting Reports generally collected montly by using the monacct command. The report is stored in /var/adm/acct/fiscal/fiscrptMM where MM is the month that the monacct command was executed. This report includes information similar to the daily reports summarized for the entire month.