This question already has an answer here:
Is there any way to find which process was running on a particular time in linux?
I found the disk utilization was 99% and CPU utilization was 100% on two different times yesterday. The issue was resolved automatically, but I need to find which process or user causes the issue.
sar -d -f /var/log/sa/sa11 to find disk utilization. Util was 98% from 11:10:01 to 11:40:03.
sar -P ALL -f sa11 to find cpu utilization. user was 99.36% from 8:40 to 9:50.
After that everything was normal without any restart.
I need to know which process(es) causes the utilization so high.