- Community Home
- >
- Servers and Operating Systems
- >
- Operating Systems
- >
- Operating System - HP-UX
- >
- Re: How to Track HISTORY of USER Commands?
Categories
Company
Local Language
Forums
Discussions
Forums
- Data Protection and Retention
- Entry Storage Systems
- Legacy
- Midrange and Enterprise Storage
- Storage Networking
- HPE Nimble Storage
Discussions
Discussions
Discussions
Forums
Discussions
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
- BladeSystem Infrastructure and Application Solutions
- Appliance Servers
- Alpha Servers
- BackOffice Products
- Internet Products
- HPE 9000 and HPE e3000 Servers
- Networking
- Netservers
- Secure OS Software for Linux
- Server Management (Insight Manager 7)
- Windows Server 2003
- Operating System - Tru64 Unix
- ProLiant Deployment and Provisioning
- Linux-Based Community / Regional
- Microsoft System Center Integration
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Discussion Boards
Community
Resources
Forums
Blogs
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Printer Friendly Page
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-02-2012 01:42 PM
07-02-2012 01:42 PM
How to Track HISTORY of USER Commands Fired ?
Hi,
In HP-UX Box, How to track the HISTORY of USER Commands Fired ?
I tried to use # history command, but its not giving any output.
Please let me know,how to track the history of a User who fired the commands and time the user fired the commands.
Regards,
Aparna.
- Tags:
- history
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-02-2012 02:06 PM - edited 07-02-2012 08:04 PM
07-02-2012 02:06 PM - edited 07-02-2012 08:04 PM
Re: How to Track HISTORY of USER Commands?
You probably have to turn on auditing and if you make sure you have a dedicated filesystem for the massive amounts of data.
- Tags:
- auditing
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-02-2012 02:10 PM
07-02-2012 02:10 PM
Re: How to Track HISTORY of USER Commands Fired ?
Don't we have any specific command in HP-UX ,like in LINUX we have HISTORY Command ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-02-2012 02:24 PM
07-02-2012 02:24 PM
Re: How to Track HISTORY of USER Commands Fired ?
The history functionality is available in HP-UX, but it does NOT log the time / date a command was run.
I have seen hacks in the Forums that will put the date in the history file but that can mess up your ability to correctly recall commands.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-02-2012 09:24 PM
07-02-2012 09:24 PM
Re: How to Track HISTORY of USER Commands Fired ?
Then, how to track the log file of a user who messed up the server ?
If someone fires commands which can bring the server down, then how to find out that ?
Who has done ?
How can we find it in HP-UNIX BOX ?
Where is the question of security then ?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-02-2012 09:38 PM
07-02-2012 09:38 PM
Re: How to Track HISTORY of USER Commands Fired ?
If user is using KORN Shell then you have to add below entry in the .profile file of the user to capture the timestamp of the command fire by user.
Entry will be as below---
set -u # error if undefined variable.
trap "echo 'logout root'" 0
# what to do on exit.
trap 'date "+#%c" | read -s' debug
# timestamp .sh_history
export HISTFILE=/tmp/$LOGNAME`date +%m%d%y%H%M%S` i
# Put it in /tmp
#My .sh_history file
AKA /tmp/$LOGNAME030911134105
Regards,
Chirag Parikh.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-02-2012 10:49 PM
07-02-2012 10:49 PM
Re: How to Track HISTORY of USER Commands?
>how to track the log file of a user who messed up the server?
>If someone fires commands which can bring the server down, then how to find out that?
Users can't mess up a server, only sysadmins can.
>Where is the question of security then?
If you force everyone to use sudo, you can log each command.