- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- Re: how to check which id has been deleted of move...
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-17-2009 12:55 AM
тАО09-17-2009 12:55 AM
how to check which id has been deleted of moved some files from HP ux 11.00 machind
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-17-2009 01:20 AM
тАО09-17-2009 01:20 AM
Re: how to check which id has been deleted of moved some files from HP ux 11.00 machind
If you want to check which user fiddled with files, you need to turn on auditing.
You may or not be able to look in their shell history files.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-17-2009 02:13 AM
тАО09-17-2009 02:13 AM
Re: how to check which id has been deleted of moved some files from HP ux 11.00 machind
can you give me any command for example
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-17-2009 02:17 AM
тАО09-17-2009 02:17 AM
Re: how to check which id has been deleted of moved some files from HP ux 11.00 machind
Like "more /home/*/.sh_history*"?
To enable auditing you may have to convert you system to trusted, then enable auditing and this only works for the next time this happens.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-17-2009 02:48 AM
тАО09-17-2009 02:48 AM
Re: how to check which id has been deleted of moved some files from HP ux 11.00 machind
>>how to check which id has been deleted of moved some files from HP ux 11.00 machind
you can check this file .sh_history which is residing /home/users/.sh_history
Or you can enable auditing
Suraj
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-17-2009 03:00 AM
тАО09-17-2009 03:00 AM
Re: how to check which id has been deleted of moved some files from HP ux 11.00 machind
The given command has listed only the what are the command has been used, is there any other commad to display the userid, date and time for that command used.
Thanks
Hari
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
тАО09-18-2009 12:49 AM
тАО09-18-2009 12:49 AM
Re: how to check which id has been deleted of moved some files from HP ux 11.00 machind
No, that requires auditing or some third party product.