Incident resource spike
Build a resource snapshot before blaming a process.
Understand the pattern
Junior operators build confidence by gathering evidence before changing systems.
uptime- Read simulated runtime and load information.
Load average is not a direct CPU percentage.
top- Inspect a single training snapshot of process and resource activity.
This lab does not run a continuously refreshing process monitor.
free- Inspect simulated memory totals and availability.
Allocated, cached, available, and free memory are not interchangeable measures.
Worked example and expected result
$ uptime10:26:04 up 12 days, 4:18, 1 learner, load average: 0.04, 0.03, 0.01
Exit status: 0. The command completed successfully in the training fixture.
$ toptop - 10:26:04 up 12 days, 1 learner, load average: 0.04, 0.03, 0.01 PID USER %CPU %MEM COMMAND 42 www-data 0.2 1.1 nginx 77 root 0.1 0.8 sshd 126 root 0.0 0.3 cron
Exit status: 0. The command completed successfully in the training fixture.
$ free -htotal used free shared buff/cache available Mem: 3.8Gi 820Mi 2.1Gi 18Mi 900Mi 2.8Gi Swap: 0B 0B 0B
Exit status: 0. The command completed successfully in the training fixture.
Explain it
Apply it elsewhere
Keep the momentum.
Complete the lab, then explain and apply the pattern.
Next: Incident rollback evidenceTry an incident drillAnonymous lesson and mastery progress lasts for this session. Sign in to keep synced lesson XP between sessions; mastery stays device-local. No speed bonus, lost lives, or hint penalties.