eventstat [options] [delay [count]]


eventstat is a program that dumps the current active system events.


eventstat options are as follow:


show help

-n event_count

only display the first event_count number of top events.


run quietly, only really makes sense with -r option.

-r csv_file

output gathered data in a comma separated values file. This can be then imported and graphed using your favourite open source spread sheet.


report short process name from /proc/pid/cmdline in CSV output. This reports just the process name.


report long process name from /proc/pid/cmdline in CSV output. This reports the process name and all the command line arguments.


just report events, PID and process name. By default the short task name from the kernel comm field will be displayed, however the -s and -l options will report more process name information.


report just kernel threads.


report just user space processes.


report the sample event count in the CSV output rather than the default events per second rate.


report the minimum, maximum, average and population standard deviation at the end of the CSV output.


strip full directory path off the process name in the CSV output.

-t threshold

ignore samples where the event delta per second less than the given threshold.


report cumulative events rather than events per sample period.


Dump events every second until stopped.

sudo eventstat

Dump the top 20 events every 60 seconds until stopped.

sudo eventstat -n 20 60

Dump events every 10 seconds just 5 times.

sudo eventstat 10 5

Quietly dump events every 10 seconds just 5 times into a CSV file with short process name.

sudo eventstat 10 5 -q -s -r results.csv


The -r option generates a comma separated file report that can be imported into spreadsheets or parsed using text processing tools. Column 1 of the data is the label for each row, columns 2 onwards contain the data for each task that generated a wakeup event.

The first row lists the task name of the thread or process. Task names in [ ] brackets are kernel threads, other tasks are the names of user space processes. By default these names are derived from the task names from /proc/timer_stats but the -s -l options fetch more complete task names from /proc/pid/cmdline instead.

The second and third rows list the names of the internal Linux kernel timer init and callback functions, respectively.

The fourth row lists the total number of wakeup events for each task during the entire run of eventstat.

The subsequent rows list the average number of wakeups per second measured during the sample interval for each task in column two onwards. The first column indicates the sample time (in seconds) since the start of the measuring.

RELATED TO eventstat…


eventstat was written by Colin King <[email protected]>

This manual page was written by Colin King <[email protected]>, for the Ubuntu project (but may be used by others).