• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 515
  • Last Modified:

On Ubuntu, what log(s) show the IP address or computer name that a user logged in from? Also, is there an associated log that would show what service(s) the user used?

On Ubuntu, what logs show the IP address or computer name that a user logged in from? Also, is there an associated log that would show what service(s) the user used?
0
haloexpertsexchange
Asked:
haloexpertsexchange
1 Solution
 
JelcinCommented:
hi, "lastlog" command or "/var/log/auth.log" should show you name,date and computer name / ip of the users that have logged in. Well for services users have used you could see the .bash_history for very detailed log everyone should have in his home directory. But that's not very good for security reasons since you can clean that log.

But there are plenty of other logs in /var/log where you can see what happend when. See the link below for detailed info on Ubuntu logs.

http://www.cyberciti.biz/faq/ubuntu-linux-gnome-system-log-viewer/

0
 
omarfaridCommented:
try the last command

http://manpages.ubuntu.com/manpages/hardy/man1/last.1.html

 Last  searches  back  through  the  file  /var/log/wtmp
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Tackle projects and never again get stuck behind a technical roadblock.
Join Now