monitor logins

[abunnudur]

Hi dears,
i have a small question...
I create a user called USER in sudo with full access to do anything like a root...
now from administrator side;how to know the time login for that user and if it is possible to know what commands he runs?
Regards,

[SKR_1]

You can find doing su - root by this user in /var/adm/syslog/syslog.log. You can check the history file of the perticular user.

Thanks

SKR

[Prashanth Waugh]

Hi Dear,

Check for su log
# cat /var/adm/sulog |more

Regards
Atul

[abunnudur]

Dear Atulkumar,
i used ur command and it gave me a long output...what i have to do if i want to know the login for the last 7 days ?
Regards,

[Rasheed Tamton]

Hi,

You can have the detail info. reg the sudo log on the below thread:

http://forums11.itrc.hp.com/service/forums/questionanswer.do?threadId=1059102

Regards.

[abunnudur]

Dear Rasheed,
Your link is not working
Regards,

[Rasheed Tamton · Accepted solution]

grep username /var/adm/sulog|tail -20

Just try with the tail command, and if there are more screens, then combine it with more

grep oracle /var/adm/sulog|tail -100|more

[Rasheed Tamton]

It will. Just try again. ITRC is always very busy also it is very slow and often gives these kind of errors, at least in this region (SA).

Or just put it in the google search and see the cache.

regards.

[V. Nyga]

Hi,

a login in CDE you'll see with 'last - check more options in the man-pages with 'man last'.

To see the complete history it's maybe required to extend the stored commands with the shell parameter 'HISTSIZE' (for sh-shell).

HTH
Volkmar

[Prashanth Waugh]

Hi,

U can check by using
cat /var/adm/sulog |grep 08/25
here I used todays date for sulog.

Regards
Atul