on our servers, typing sar show's the system load statistics for today starting at midnight, is it possible to show yesterdays statistics?

3 Answers 3


Usually, sysstat, which provides a sar command, keeps logs in /var/log/sysstat/ or /var/log/sa/ with filenames such as /var/log/sysstat/sadd where dd is a numeric value for the day of the month (starting at 01). By default, the file from the current day is used; however, you can change the file that is used with the -f command line switch. Thus for the 3rd of the month you would do something like:

sar -f /var/log/sysstat/sa03

If you want to restrict the time range, you can use the -s and -e parameters. If you want to routinely get yesterday's file and can never remember the date and have GNU date you could try

sar -f /var/log/sysstat/sa$(date +%d -d yesterday)

I highly recommend reading the manual page for sar.

  • 13
    on our cPanel/CentOS systems it appears to be in /var/log/sa Jan 10, 2011 at 6:59
  • 1
    yup, centos it's: sar -b -f /var/log/sa/sa20 for the 20th of the month.
    – stantonk
    Jan 21, 2015 at 0:51
  • 5
    /var/log/sa for Redhat as well
    – sweetfa
    Feb 3, 2015 at 21:17
  • 1
    /var/log/sa in SUSE too Jan 29, 2016 at 12:09

Try the command as follows to get historic memory utilization details.

sar -r -f /var/log/sa/sa01

The files in /var/log/sa record everything in the world.


There is a "magic" parameter for that: -N, e.g. the following would display the yesterday's stats:

sar -1

Collect weekly data from many servers, put it to NFS:

parallel --tag --nonall -k -j 3 -S server1,server2,server3 \
  'of="/nfs-path/sar-$(hostname).out"; rm -f "${of}"; for N in {7..0}; do sar -A -$N 2> /dev/null >> "${of}"; done'

Those files can be loaded into kSar

  • this is so much better than the accepted answer, it's built into sar command, exactly what I hoped it could do! Oct 8, 2021 at 16:55

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.