https://community.hpe.com/t5/operating-system-linux/history/m-p/3614094#M19353 The HISTORY won't tell you that, you need to enable auditing and use the lastcomm command to review entries.<BR /><BR />A nice tool for C2 style auditing is SNARE:<BR /><BR /><A href="http://www.intersectalliance.com/projects/Snare/" target="_blank">http://www.intersectalliance.com/projects/Snare/</A> Mon, 29 Aug 2005 13:53:05 GMT Ivan Ferreira 2005-08-29T13:53:05Z https://community.hpe.com/t5/operating-system-linux/history/m-p/3614092#M19351 In bash, for a users history, can you tell what time a command was executed? Or is there a way to tell when a command was executed?I know a command was executed but I want to know what time? I didn't see the message in system log. Mon, 29 Aug 2005 11:46:46 GMT https://community.hpe.com/t5/operating-system-linux/history/m-p/3614092#M19351 Ragni Singh 2005-08-29T11:46:46Z https://community.hpe.com/t5/operating-system-linux/history/m-p/3614093#M19352 You would have to have auditing enabled. If it wasn't auditing at the time the command was run, there isn't any way to go back to retrieve that. Mon, 29 Aug 2005 11:55:51 GMT https://community.hpe.com/t5/operating-system-linux/history/m-p/3614093#M19352 CSG Office 2005-08-29T11:55:51Z https://community.hpe.com/t5/operating-system-linux/history/m-p/3614094#M19353 The HISTORY won't tell you that, you need to enable auditing and use the lastcomm command to review entries.<BR /><BR />A nice tool for C2 style auditing is SNARE:<BR /><BR /><A href="http://www.intersectalliance.com/projects/Snare/" target="_blank">http://www.intersectalliance.com/projects/Snare/</A> Mon, 29 Aug 2005 13:53:05 GMT https://community.hpe.com/t5/operating-system-linux/history/m-p/3614094#M19353 Ivan Ferreira 2005-08-29T13:53:05Z