Looking to automate the performance metrics and it seems like it should be straightforward.

  What I would like is to pull the text output that is generated every ~10 minutes by default without having to run a different cron across all the systems.

  (that is - I get that I could probably modify the "sa1" script or write another one to dump the data to a socket or something for syslog to pick up. I am hoping to just do something to monitor the data that is automatically generated. - something like using any file in /var/log/sa/sar?? as a source)

 The end system (for me at the moment) would be splunk so parsing the different format data *could* be pushed to that end or could be done with patterndb or something else on the syslog-ng side.

Thoughts?

Thanks in advance!!

Jim