Last commands

I can't remember the right command, how do you look to see what the last commands that was run by certain users.
am on a solais 9 box.

Thanks,
bt707Asked:
Who is Participating?

Improve company productivity with a Business Account.Sign Up

x
 
Pete LongConnect With a Mentor Technical ConsultantCommented:
>>i thought there was a way to do that without being loged in as a user.


su username
0
 
Pete LongTechnical ConsultantCommented:
history | more
Show the last (1000 or so) commands executed from the command line on the current account. The | more causes the display to stop after each screen fill.

0
 
Pete LongTechnical ConsultantCommented:
NAME
     lastcomm - display the last commands  executed,  in  reverse
     order



SYNOPSIS
     lastcomm [ command-name ] ... [ user-name ] ...
          [ terminal-name ] ...



DESCRIPTION
     The lastcomm command gives information  on  previously  exe-
     cuted  commands.  lastcomm with no arguments displays infor-
     mation about all the commands recorded  during  the  current
     accounting  file's  lifetime.   If  called  with  arguments,
     lastcomm only displays accounting entries  with  a  matching
     command-name, user-name, or terminal-name.

     If terminal-name is `- -' there was no controlling  TTY  for
     the  process.  The process was probably executed during boot
     time.  If terminal-name is `??', the controlling  TTY  could
     not be decoded into a printable name.



EXAMPLES
     The command:
          example% lastcomm a.out root term/01

     produces a listing of all the executions of  commands  named
     a.out, by user root while using the terminal term/01.

     The command:
          example% lastcomm root

     produces a listing of all  the  commands  executed  by  user
     root.

     For each process  entry,  lastcomm  displays  the  following
     items of information:

          o  The command name under which the process was called.

          o  One or more  flags  indicating  special  information
             about  the  process.   The  flags have the following
             meanings:

               F  The process performed a fork but not an exec.

               S  The process ran as a set-user-id program.

          o  The name of the user who ran the process.

          o  The terminal which the user was logged in on at  the
             time (if applicable).

          o  The amount of CPU  time  used  by  the  process  (in
             seconds).

          o  The date and time the process exited.

http://www.biostat.wisc.edu/cgi-bcg/man.cgi?section=all&topic=lastcomm
0
Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

 
sunnycoderCommented:
Hi bt707,

login as that user and use history command

history

Sunnycoder
0
 
sunnycoderCommented:
PeteLong,

that was faaaaast ... sorry

Sunnycoder
0
 
Pete LongTechnical ConsultantCommented:
or look at that user's command history (in ~user/.history).
0
 
Pete LongTechnical ConsultantCommented:
:) no need to appologise - its not often I get a shot at a solaris Q :)
0
 
bt707Author Commented:
I do use the last | more command, but that only tells who loged in and what time, does not show what commands was used.

Sunnycoder, i have root rights but do you have to login as that user and use the history command, i thought there was a way to do that without being loged in as a user.

Thanks
0
 
sunnycoderConnect With a Mentor Commented:
bt707,

as Pete said, you can examine the history files present in the home directory of that user.

If you have root access, all you need to do is

su username   <<you wont be prompted for password
history

Sunnycoder
0
 
Pete LongTechnical ConsultantCommented:
oooh im too fast ;p
0
 
sunnycoderCommented:
bt707,

ok, I tried the su method on my linux box, it does not work ...
even su - username does not work

seems like you will have to examine the history file for that user

typically
/user/home/directory/.history

or similar name like .bash_history in the home directory ...

errr, I just recd a good assist, did that work on solaris box ?

Sunnycoder
0
 
Pete LongTechnical ConsultantCommented:
ThanQ - That was my first - and probably last points in the solaris TA LOL

Pete
0
 
bt707Author Commented:
thanks to all for the fast replies back, would give all the points to both of you but they won't allow that, so I spit them up
and gave more to Petelong just becuse it hit the reply button so fast,

Thanks again
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.