System Accounting Files

System Accounting Files
Prev	Chapter 17. System Accounting (Reference)	Next

The /var/adm directory contains the active data collection files. The following table describes the accounting files in this directory.

Table 17.7. Files in the /var/adm Directory

File	Description
`dtmp`	Output from the acctdusg program
`fee`	Output from the chargefee program, which are the ASCII tacct records
`pacct`	Active process accounting file
`pacct` `n`	Process accounting files that are switched by running the turnacct script
`Spacct` `n`.`MMDD`	Process accounting files for `MMDD` during execution of the runacct script

The /var/adm/acct directory contains the nite, sum, and fiscal directories. These directories contain the actual data collection files. For example, the nite directory contains files that are reused daily by the runacct script. A brief summary of the files in the /var/adm/acct/nite directory follows.

Table 17.8. Files in the /var/adm/acct/nite Directory

File	Description
`active`	Used by the runacct script to record progress and print warning and error messages
`active`.`MMDD`	Same as the `active` file after the runacct script detects an error
`cms`	ASCII total command summary used by the prdaily script
`ctacct.` `MMDD`	Connect accounting records in `tacct.h` format
`ctmp`	Output of acctcon1 program, which consists of connect session records in `ctmp.h` format (acctcon1 and acctcon2 are provided for compatibility purposes)
`daycms`	ASCII daily command summary used by the prdaily script
`daytacct`	Total accounting records for one day in `tacct.h` format
`disktacct`	Disk accounting records in `tacct.h` format, created by the dodisk script
`fd2log`	Diagnostic output during execution of the runacct script
`lastdate`	Last day the runacct script executed (in date +%m%d format)
`lineuse`	`tty` line usage report used by the prdaily script
`lock`	Used to control serial use of the runacct script
`log`	Diagnostic output from the acctcon program
`log` `.MMDD`	Same as the `log` file after the runacct script detects an error
`owtmpx`	Previous day's wtmpx file
`reboots`	Beginning and ending dates from the `wtmpx` file, and a listing of reboots
`statefile`	Used to record current state during execution of the runacct script
`tmpwtmp`	`wtmpx` file corrected by the wtmpfix program
`wtmperror`	Contains wtmpfix error messages
`wtmperror` `MMDD`	Same as the `wtmperror` file after the runacct script detects an error
`wtmp` `MMDD`	The runacct script's copy of the `wtmpx` file

The sum directory contains the cumulative summary files updated by the runacct script and used by the monacct script. The following table summarizes the files in the /var/adm/acct/sum directory.

Table 17.9. Files in the /var/adm/acct/sum Directory

File	Description
`cms`	Total command summary file for current fiscal period in binary format
`cmsprev`	Command summary file without latest update
`daycms`	Command summary file for the day's usage in internal summary format
`loginlog`	Record of last date each user logged in; created by the lastlogin script and used in the prdaily script
`rprt.` `MMDD`	Saved output of prdaily script
`tacct`	Cumulative total accounting file for current fiscal period
`tacctprev`	Same as the `tacct` file without latest update
`tacct.` `MMDD`	Total accounting file for `MMDD`

The fiscal directory contains periodic summary files that are created by the monacct script. The following table summarizes the files in the /var/adm/acct/fiscal directory.

Table 17.10. Files in the /var/adm/acct/fiscal Directory

File	Description
`cms` `n`	Total command summary file for fiscal period `n` in internal summary format
`fiscrpt` `n`	Report similar to `rprt` `n` for fiscal period `n`
`tacct` `n`	Total accounting file for fiscal period `n`

Files Produced by the runacct Script

The following table summarizes the most useful files produced by the runacct script. These files are found in the /var/adm/acct directory.

Table 17.11. Files Created by the runacct Script

File	Description
`nite/daytacct`	The total accounting file for the day in `tacct.h` format.
`nite/lineuse`	The runacct script calls the acctcon program to gather data on terminal line usage from the `/var/adm/acct/nite/tmpwtmp` file and writes the data to the `/var/adm/acct/nite/lineuse` file. The prdaily script uses this data to report line usage. This report is especially useful for detecting bad lines. If the ratio between the number of logouts to logins is greater than three to one, the line is very likely failing.
`sum/cms`	This file is the accumulation of each day's command summaries. The accumulation restarts when the `monacct` script is executed. The ASCII version is the `nite/cms` file.
`sum/daycms`	The runacct script calls the acctcms program to process the commands used during the day to create the Daily Command Summary report and stores the data in the `/var/adm/acct/sum/daycms` file. The ASCII version is the `/var/adm/acct/nite/daycms` file.
`sum/loginlog`	The runacct script calls the lastlogin script to update the last date logged in for the logins in the `/var/adm/acct/sum/loginlog` file. The lastlogin command also removes from this file any logins that are no longer valid.
`sum/rprt.` `MMDD`	Each execution of the runacct script saves a copy of the daily report that was printed by the prdaily script.
`sum/tacct`	Contains the accumulation of each day's `nite/daytacct` data and is used for billing purposes. The monacct script restarts accumulating this data each month or fiscal period.

Prev	Up	Next
Daily Accounting Reports	Home	Chapter 18. Managing System Performance (Overview)