topic Re: monitor logins in Operating System - HP-UX

monitor logins

abunnudur — Mon, 25 Aug 2008 08:05:01 GMT

Hi dears,
i have a small question...
I create a user called USER in sudo with full access to do anything like a root...
now from administrator side;how to know the time login for that user and if it is possible to know what commands he runs?
Regards,

Re: monitor logins

SKR_1 — Mon, 25 Aug 2008 08:09:54 GMT

You can find doing su - root by this user in /var/adm/syslog/syslog.log. You can check the history file of the perticular user.

Thanks

SKR

Re: monitor logins

Prashanth Waugh — Mon, 25 Aug 2008 08:20:43 GMT

Hi Dear,

Check for su log
# cat /var/adm/sulog |more

Regards
Atul

Re: monitor logins

abunnudur — Mon, 25 Aug 2008 08:37:39 GMT

Dear Atulkumar,
i used ur command and it gave me a long output...what i have to do if i want to know the login for the last 7 days ?
Regards,

Re: monitor logins

Rasheed Tamton — Mon, 25 Aug 2008 08:38:22 GMT

Hi,

You can have the detail info. reg the sudo log on the below thread:

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1059102

Regards.

Re: monitor logins

abunnudur — Mon, 25 Aug 2008 08:40:44 GMT

Dear Rasheed,
Your link is not working
Regards,

Re: monitor logins

Rasheed Tamton — Mon, 25 Aug 2008 08:43:00 GMT

grep username /var/adm/sulog|tail -20

Just try with the tail command, and if there are more screens, then combine it with more

grep oracle /var/adm/sulog|tail -100|more

Re: monitor logins

Rasheed Tamton — Mon, 25 Aug 2008 08:46:10 GMT

It will. Just try again. ITRC is always very busy also it is very slow and often gives these kind of errors, at least in this region (SA).

Or just put it in the google search and see the cache.

regards.

Re: monitor logins

V. Nyga — Mon, 25 Aug 2008 08:59:52 GMT

Hi,

a login in CDE you'll see with 'last - check more options in the man-pages with 'man last'.

To see the complete history it's maybe required to extend the stored commands with the shell parameter 'HISTSIZE' (for sh-shell).

HTH
Volkmar

Re: monitor logins

Prashanth Waugh — Mon, 25 Aug 2008 09:33:28 GMT

Hi,

U can check by using
cat /var/adm/sulog |grep 08/25
here I used todays date for sulog.

Regards
Atul