I would say all of them. Generally top + atop + the log files should be enough.