Solved

How can I log user action?

Posted on 1998-06-19
5
255 Views
Last Modified: 2013-12-27
I am running Solaris 2.5.1 and would like to log all user action.  For example, I would like to know what commands users have done, files changed by them, etc - even where they have been, if possible. Can this be done?  

Thanks,

racy
0
Comment
Question by:racy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
5 Comments
 
LVL 2

Accepted Solution

by:
gormenghast earned 100 total points
ID: 2008099
Hi
If you are running accounting you can use commands such as:
lastcomm --> displays all commands executed (by user and TTY)
acctcom  --> ditto
acctcms  --> displays all commands executed (by time of day)

last         --> shows all login activity

If you want to monitor user activity completely you could even activate the script command in their login files to put all their login activity to a file. This will show everything a user does in their shell.
script [option] [file]
-a append script to file.
The default filename for script is typescript. I doubt if it would be necessary to resort to this sort of measure long term, and you would have to manage the files generated somehow.
0
 

Author Comment

by:racy
ID: 2008100
I think this may be what I want...how can I tell if I have accounting and/or turn it on...?


0
 
LVL 2

Expert Comment

by:gormenghast
ID: 2008101
Hi
Under Solaris accounting is off by default on a new system.
To start accounting at boot you need to create an entry in /etc/rc2.d or /etc/rc3.d by linking the file /etc/init.d/acct to /etc/rc2.d/S22acct.
This file executes the command /bin/su - adm -c /usr/lib/acct/startup
Create a shutdown entry by linking the same file to /etc/rc0.d/K22.acct.
This file executes the command /usr/lib/acct/shutacct.

You will then need to set up various crons for the various accounting utilities and to control the accounting file sizes. (Beware these can become quite large, there is also a small overhead on system performance when using accounting).

You really need to read up a bit on accounting before continuing, the answerbooks are probably a good place to start.
0
 

Author Comment

by:racy
ID: 2008102
Thanks again..perfect explanation.  Just one more question, and I'll leave you alone.  Where can I get these 'answerbooks'?  Solaris seems to have a lack of published books.  
0
 
LVL 2

Expert Comment

by:gormenghast
ID: 2008103
Hi
Answerbooks are electronic books supplied with Solaris.
You should find a pack of CDs which came with Solaris and one of these should contain the answerbooks. The one you will be most interested in is the System Administration answerbook. Once installed answerbooks are launched from the Programs menu in openwindows, this launches a gui which lists all installed answerbooks and has search facilities etc.
Get back to me anytime, or email me snorman@pavilion.co.uk
0

Featured Post

Free Tool: Path Explorer

An intuitive utility to help find the CSS path to UI elements on a webpage. These paths are used frequently in a variety of front-end development and QA automation tasks.

One of a set of tools we're offering as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
linux  centos   virtualization network quetion 6 90
Access_log 17 183
how to send mail in unix 2 48
user defined, environmental. local, global variables 4 26
Attention: This article will no longer be maintained. If you have any questions, please feel free to mail me. jgh@FreeBSD.org Please see http://www.freebsd.org/doc/en_US.ISO8859-1/articles/freebsd-update-server/ for the updated article. It is avail…
This tech tip describes how to install the Solaris Operating System from a tape backup that was created using the Solaris flash archive utility. I have used this procedure on the Solaris 8 and 9 OS, and it shoudl also work well on the Solaris 10 rel…
This video shows how to set up a shell script to accept a positional parameter when called, pass that to a SQL script, accept the output from the statement back and then manipulate it in the Shell.
In a previous video, we went over how to export a DynamoDB table into Amazon S3.  In this video, we show how to load the export from S3 into a DynamoDB table.

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question