When your server was slow three hours ago but looks fine now, sysstat gives you the historical data to find out why. This guide covers installing and configuring sar, iostat, and mpstat on Linux, and walks through a real incident investigation workflow to diagnose intermittent CPU, I/O, and memory issues.