Linux Performance Monitoring with SAR (System Activity Reporter)

When managing a Linux server — especially a VPS — performance bottlenecks are inevitable. To track them effectively over time, you need historical data. That’s where SAR (System Activity Reporter) comes in.

It’s part of the sysstat package, available on most Linux distributions, and helps you track:

• CPU usage (sar -u)
• Memory utilization (sar -r)
• I/O statistics (sar -b)
• Network activity (sar -n)
• Task switching (sar -w)
• Load averages (sar -q)

Installation

For Debian-based systems:

sudo apt update
sudo apt install sysstat

For RHEL/CentOS:

sudo yum install sysstat

Enable data collection:

sudo systemctl enable sysstat
sudo systemctl start sysstat

Common SAR Commands

• CPU Usage:

sar -u 1 3

Shows CPU usage 3 times with 1-second intervals.

• Memory Usage:

sar -r

• I/O Stats:

sar -b

• Network:

sar -n DEV

• Load Average:

sar -q

Analyzing Historical Logs

Logs are stored in /var/log/sysstat/saXX (where XX is the day). To view previous data:

sar -u -f /var/log/sysstat/sa10

This helps identify patterns and narrow down issues even days later.

Automate with Cron

SAR uses cron to log data every 10 minutes by default. You can adjust this in /etc/cron.d/sysstat.

SAR offers visibility into resource usage without needing heavy monitoring suites. It’s ideal for VPS users who need fast, historical insights into system behavior.

Full setup & usage guide: 👉 vsys.host/how-to/linux-performance-monitoring-with-sar-system-activity-reporter