HPE Community read-only access December 15, 2018
This is a maintenance upgrade. You will be able to read articles and posts, but not post or reply.
Hours:
Dec 15, 4:00 am to 10:00 am UTC
Dec 14, 10:00 pm CST to Dec 15, 4:00 am CST
Dec 14, 8:00 pm PST to Dec 15, 2:00 am PST
System Administration
cancel
Showing results for 
Search instead for 
Did you mean: 

How to keep record which commands are run by the user

 
Md. Minhaz Khan
Super Advisor

How to keep record which commands are run by the user

Dear Concern

I want to keep record which users are login in my system at which time and what commands they exucate after login.

My system model is RP7420 and OS version is B.11.11

Thanks
Minhaz
6 REPLIES
avizen9
Esteemed Contributor

Re: How to keep record which commands are run by the user

HI Md. Minhaz,
its not easy to keep all this information, you may need to convert your system in trusted system which will generate more logs compare to normal.

when user logged in you this system, can check it through last command. thanks,
smatador
Honored Contributor

Re: How to keep record which commands are run by the user

Hi,
Quick search on itrc about logging command
http://forums13.itrc.hp.com/service/forums/questionanswer.do?threadId=1152195
http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=89438
In my experience, the script command capture all so be careful with it.
Hope it helps
Md. Minhaz Khan
Super Advisor

Re: How to keep record which commands are run by the user

Thanks a lot to help me. I have got solution.

Thanks
Minhaz
Steven Schweda
Honored Contributor

Re: How to keep record which commands are run by the user

> [...] I have got solution.

Some readers might be interested in knowing
what that solution was.
Basheer_2
Trusted Contributor

Re: How to keep record which commands are run by the user

for simple tracking, you can use the .sh_hhistory file under users $HOME dir.

You can set HISTRORY SIZE
Viktor Balogh
Honored Contributor

Re: How to keep record which commands are run by the user

the solution would be auditing the system:

http://docs.hp.com/en/5991-1101/ch08s03.html
****
Unix operates with beer.