- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- Re: Find who execute command in a server
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-22-2020 11:32 PM
06-22-2020 11:32 PM
Find who execute command in a server
Hello,
I am currently doing an audit to a server. I would like find a history like who run/execute certain commands in the server. May I know which dir should I look at, or any tips can be share since I'm not really familiar into this auditing stuff?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
06-30-2020 03:53 AM
06-30-2020 03:53 AM
Re: Find who execute command in a server
You would first require to enable auditing in the server and then define policy as per your site requirement.
You can define policy to audit selected events for success, for failure, or both.
Also, which users and events need to be audited, based on the site policy.
Following white paper defines how to configure and manage Auditing in HP-UX 11i v2 and 11i v3 :
https://support.hpe.com/hpesc/public/docDisplay?docLocale=en_US&docId=emr_na-c02899022
Note that you cannot get historical data if auditing was not enabled in the server.
Audit logs get populated only after enabling auditing in the sever.
You may log a case with HPE support if you have any specific issue with system audit.
Regards,
MJ
I work for HPE