HPE Community
Operating System - Linux
1829638 Members
1687 Online
109992 Solutions
New Discussion

history

 
Ragni Singh
Super Advisor

‎08-29-2005 04:46 AM

‎08-29-2005 04:46 AM

history

In bash, for a users history, can you tell what time a command was executed? Or is there a way to tell when a command was executed?I know a command was executed but I want to know what time? I didn't see the message in system log.
0 Kudos
Reply
2 REPLIES 2
CSG Office
Frequent Advisor

‎08-29-2005 04:55 AM

‎08-29-2005 04:55 AM

Re: history

You would have to have auditing enabled. If it wasn't auditing at the time the command was run, there isn't any way to go back to retrieve that.
0 Kudos
Reply
Ivan Ferreira
Honored Contributor

‎08-29-2005 06:53 AM

‎08-29-2005 06:53 AM

Re: history

The HISTORY won't tell you that, you need to enable auditing and use the lastcomm command to review entries.

A nice tool for C2 style auditing is SNARE:

http://www.intersectalliance.com/projects/Snare/
Por que hacerlo dificil si es posible hacerlo facil? - Why do it the hard way, when you can do it the easy way?
0 Kudos
Reply
The opinions expressed above are the personal opinions of the authors, not of Hewlett Packard Enterprise. By using this site, you accept the Terms of Use and Rules of Participation.