Detailed User History

[Scott Williams_1]

How can I add a date time stamp and ip address to roots and or the users sh_history file?

[Victor BERRIDGE]

Hi,
You will finish up corrupting .sh_history....
I dont think that its a good idea...
To another file perhaps?

All the best
Victor

[Shaikh Imran]

Hi,
Never used but i think you should also try
system auditing.
you can enable auditing from sam for any user/s including root.

Regards,

[Mobeen_1]

Scott,
Doesn't last command give you that information...

I am not sure if its last or lastinfo...

we used to have that information on Solaris and AIX

regards
Mobeen

[TommyT]

Hi!
The usage of last command is.
last -R for sucessful logins whit user and timestamp
lastb -R for bad logins.

//Tommy

[Geoff Wild]

Here's what I do in root's .profile:

# Set up logging
HISTFILE=${HOME}/.sh_history_`who am i|awk '{ print $1}'`
date >>$HISTFILE
export HISTFILE
HISTSIZE=500
export HISTSIZE

Course, that only set's a date at login.

We have multiple admins, must su to root, that way each of us has our own sh_history...

Rgds...Geoff

[Scott Williams_1]

The purpose of the sh_history file is to capture the commands users are envoking. I want to take it a step further and add a date/time stamp as well as ip address to it.

Thanks in advanace.

[Victor BERRIDGE]

Not only,
It is also so that you can recall the commands...
But if that doesnt bother you just add in the users .profile:
LOG=`who am i -R`
and as last line:
$LOG>>.sh_history

All the best
Victor