cancel
Showing results for 
Search instead for 
Did you mean: 

History of OS Commands

Deepu Chakravarty
Regular Advisor

History of OS Commands

We have rp7420 with HPUX 11.11 OS server. We want to know what are the OS related commands issued in the server on the command prompt in the last two days. Please advise. Thanks.
5 REPLIES
Mark McDonald_2
Trusted Contributor

Re: History of OS Commands

Do you have auditing enabled?

If not then this could be impossible.

Check shell history for the users in question.
Check sulog
Check syslog

last | more will show which users logged in, sulog will show if they switched to root.

Sridhar R
Regular Advisor

Re: History of OS Commands

Taifur
Respected Contributor

Re: History of OS Commands

Hi Deepu,

Pls run below command & check
#cat /etc/history

Rgds//
Taifur
Avinash20
Honored Contributor

Re: History of OS Commands

We want to know what are the OS related commands issued in the server on the command prompt in the last two days

>> Without the system being trusted, you could enable history for each and every user

>> You need to configure the history by editing the profile file

>> You could find the list of command executed by the user in .sh_history file under home directory of user if enabled.

history file cannot give time at which it was executed.
Am not sure but writing a script might help.

Else if you could enable auditing you will be able to get all the activity by all the users captured.. noted tat the audit files are huge and require lot of space.
"Light travels faster than sound. That's why some people appear bright until you hear them speak."
Mark McDonald_2
Trusted Contributor

Re: History of OS Commands

Deepu

Did you find what you needed? How about some points for the answers so far?