- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- History of user executed commands
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-13-2009 04:05 AM
тАО07-13-2009 04:05 AM
History of user executed commands
my requiremnet is to capture all commands with login dtls(date/time,terminal ip) of all users logged in to my server running hpux 11.23 --i dont want to enable auditing ..
what needs to be done on /etc/profile to get this happen as shown below ..
.sh_history_root
.sh_histroy_oracle
.sh_history_sap
pls help
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-13-2009 04:14 AM
тАО07-13-2009 04:14 AM
Re: History of user executed commands
HISTFILE=/root/.sh_history # file to store command history
HISTSIZE=2000 # number of commands in history
If you are doing this for auditing purposes, please know that it will not hold water for an official audit as these files need to be writable by the users who are logged in and once they can write to these files, they can modify them as they wish and delete the commands that they do not want seen by you and others.
If you are after auditing, you either need to turn auditing on and bear the cost of it (disk space and performance-wise) or invest in a 3rd party application like PowerBroker.
Hope this helps
UNIX because I majored in cryptology...
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-13-2009 04:15 AM
тАО07-13-2009 04:15 AM
Re: History of user executed commands
Set this parameter in users .profile
HISTFILE=/.sh_history
export HISTFILE
export HISTSIZE=(required size)
It will captures all commands.
Regards
Sunny
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-13-2009 04:18 AM
тАО07-13-2009 04:18 AM
Re: History of user executed commands
modification on my previous reply
export HISTSIZE=(no of commands)
Regards
Sunny
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-13-2009 04:30 AM
тАО07-13-2009 04:30 AM
Re: History of user executed commands
Pete
Pete
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО07-13-2009 04:43 AM
тАО07-13-2009 04:43 AM
Re: History of user executed commands
as noted above:
1) the history file will only hold the last "x" number of commands. If set to low, you may not capture the entire session
2) the history file will not be date/time stamped
3) the history file won't have any terminal / source IP information.
Also, since it is user-writeable, it can easily be emptied / destroyed.
I know of nothing that will capture everything your requested. Symark's PowerBroker can come close, but won't have the IP info, and its *expensive*