System Administration

Re: Audit a user logins on Linux server

 
SOLVED
Go to solution
Hanry Zhou
Super Advisor

Audit a user logins on Linux server

If I wanted to keep track of a user's logins and also what directories he/she has gone through, what steps should I go through for this purpose?

My understanding is all activites can be stored in "messages" file, and I just need to somehow enabled log configurations. 

 

Thanks!

none
1 REPLY 1
avd437
HPE Pro
Solution

Re: Audit a user logins on Linux server

You have to enable auditing 

# vim /etc/audit/rules.d/audit.rules - mention your rules here

# systemctl restart auditd.service - start the service

# cat /var/log/audit/audit.log - logs location will be here


I work for HPE