how to find out system usage by an x process at certain time
 

There is some un-known kernal process running on my unix server.

it cause system use maximum memory and cpu usage. it pops up for like a nano second, can't be seen through top, can't be seen through proc, and sar...

can anyone help me how to find the process name, so can troubleshoot.

the monitoring tool that shows the server in critical stage (max memory, cpu usage) is centreon

i have tried sar , but all the sar, proc, and top shows no sign of the process.

anyone there to help its my first post, sorry for any grammer or spelling mistakes.

looking forward to hearing from you.

the server is redhat jboss...

many thanks in advance.

Doesn't sound like a kernel process...

More like a cron job that runs a fairly large process with lots of static memory (causing a lot of memory thrashing)... and exits immediately.

Another possibility is a long running process that sleeps, but when it activates does the same thing (thrashing memory) and goes back to sleep. One bit of code I saw do things similarly was a scheduler. It would wake up once every 10 minutes to do a lot of computation for load balancing - then go back to sleep.

You might look into the audit subsystem - it can look at a lot of things that other tools take snapshots for.

Thanks Jpollard, make sense i'm looking into subsystem audit, in meanwhile if anyone know any commands or combination to catch this culprit will be helpful.