You can use the filestats command with the ages option to display a daily breakdown of file changes in a volume.
The following example shows sample output from the filestats command with the ages option.
toaster> filestats ages 1D,2D,3D,4D,5D,6D,7D,8D,9D,10D,11D,12D,13D,14D volume vol0 snapshot hourly.0 VOL=vol0 SNAPSHOT=hourly.0 INODES=1087338 COUNTED_INODES=7062 TOTAL_BYTES=3835561873 TOTAL_KB=3701388 FILE SIZE CUMULATIVE COUNT CUMULATIVE TOTAL KB 1K 2313 8428 10K 6057 30280 100K 6686 49148 1M 6949 167664 10M 7008 406648 100M 7053 1538644 1G 7062 3701388 MAX 7062 3701388 AGE(ATIME) CUMULATIVE COUNT CUMULATIVE TOTAL KB 1D 12 332 2D 20 364 3D 26 18016 4D 44 18208 5D 84 64984 6D 85 64984 7D 116 65308 8D 142 67552 9D 143 71620 10D 143 71620 11D 144 71624 12D 166 93216 13D 166 93216 14D 378 109712 MAX 7062 3701388
To display files with ages under 900 seconds (15 minutes), under 4 hours, and under 7 days, you use the following command: filestats ages 900,4H,7D volume vol0 snapshot hourly.1
The following example shows the age section of the output:
AGE(ATIME) CUMULATIVE COUNT CUMULATIVE TOTAL KB 900 0 0 4H 0 0 7D 785 21568 MAX 882 146000