Is there an existing tool for solaris/unix that keeps a history trail of the list of running processes. I'd like to be able to review backwards in time what processes were active/running.I can create a cron job that just regularly logs the output of ps into files, but this is crude and over a large server farm seems inefficient and can create many files.And I need full command arguments so it has to be /usr/ucb/ps auxww output, ideally with cpu times, state, rss, pid, ppid, zone information.Also, if possible the output should be easy to parse--e.g. in a consistent delimited format or some other.
Is there a process logging tool for solaris?
solaris;monitoring;process management
Use auditing.Solaris Auditing (Overview)Auditing generates audit records when specified events occur. Most  commonly, events that generate audit records include the following:System startup and system shutdownLogin and logoutProcess creation or process destruction, or thread creation or thread destructionOpening, closing, creating, destroying, or renaming of objectsUse of privilege capabilities or role-based access control (RBAC)Identification actions and authentication actionsPermission changes by a process or userAdministrative actions, such as installing a packageSite-specific applicationsAudit records are generated from three sources:By an applicationAs a result of an asynchronous audit eventAs a result of a process system callA good blog article on Solaris auditing can be found here.