https://community.hpe.com/t5/operating-system-linux/audit-a-user-logins-on-linux-server/m-p/7105844#M55262 <P>You have to enable auditing&nbsp;</P><P># vim /etc/audit/rules.d/audit.rules - mention your rules here</P><P># systemctl restart auditd.service - start the service</P><P># cat /var/log/audit/audit.log - logs location will be here</P> Wed, 21 Oct 2020 18:37:08 GMT avd437 2020-10-21T18:37:08Z https://community.hpe.com/t5/operating-system-linux/audit-a-user-logins-on-linux-server/m-p/7105579#M55261 <P>If I wanted to keep track of a user's logins and also what directories he/she has gone through, what steps should I go through for this purpose?</P><P>My understanding is all activites can be stored in "messages" file, and I just need to somehow enabled log configurations.&nbsp;</P><P>&nbsp;</P><P>Thanks!</P> Tue, 20 Oct 2020 11:53:46 GMT https://community.hpe.com/t5/operating-system-linux/audit-a-user-logins-on-linux-server/m-p/7105579#M55261 Hanry Zhou 2020-10-20T11:53:46Z https://community.hpe.com/t5/operating-system-linux/audit-a-user-logins-on-linux-server/m-p/7105844#M55262 <P>You have to enable auditing&nbsp;</P><P># vim /etc/audit/rules.d/audit.rules - mention your rules here</P><P># systemctl restart auditd.service - start the service</P><P># cat /var/log/audit/audit.log - logs location will be here</P> Wed, 21 Oct 2020 18:37:08 GMT https://community.hpe.com/t5/operating-system-linux/audit-a-user-logins-on-linux-server/m-p/7105844#M55262 avd437 2020-10-21T18:37:08Z