topic Re: Last Login Information in Operating System - HP-UX

Last Login Information

Scott E Smith — Thu, 01 Jun 2000 14:51:17 GMT

I am attempting to create a report of the last logins (successful) for all of the users on our servers. Using the "last" command I just keep getting a lengthy list of all successfull logins in the audit files. How can I limit the returned data to just the most recent successful login?

Re: Last Login Information

Andrew Lartey — Thu, 01 Jun 2000 14:58:03 GMT

I guess you could grep for particular date or dates.

other thing to do is roll the log file over once a week (or however often you consider recent logins to be)

/var/adm/wtmp

Re: Last Login Information

CHRIS_ANORUO — Thu, 01 Jun 2000 15:24:57 GMT

Try last -R -count were count could be any number.

eg last -R -50

Cheers

Re: Last Login Information

Paul Hite — Thu, 01 Jun 2000 18:57:37 GMT

Re: Last Login Information

Duane Gorder — Mon, 05 Jun 2000 16:52:19 GMT

Try the following. It gets a list of all the ids in /etc/passwd, then checks each one with the "last" command and takes only one answer from the "last" command for each passwd entry.

awk -F: '{print "last | grep " $1
" | head -1"}' /etc/passwd | ksh -

Re: Last Login Information

Duane Gorder — Mon, 05 Jun 2000 16:58:58 GMT

My previous answer should be all on one line or have a continuation character.
Try the following. It gets a list of all the ids in /etc/passwd, then checks each one with the "last" command and takes only one answer from the "last" command for each passwd entry.

awk -F: '{print "last | grep " $1 " | head -1"}' /etc/passwd | ksh -