How to find one partucular user logs when there are lots of users running on it - UNIX for Advanced & Expert Users

ksr.test · #4 (**permalink**) 10-06-2008

Quote:

Originally Posted by otheus

You can just grep the output of tail:

Code:

USER=john
RHOST=in.com
tail -f logs/application.log | grep "user $USER"

The other thing you can do is install pam_script and set up a "onsessionopen" and "onsessionclose" script which will generate such a logfile, and is guaranteed to run (unless sshd is killed with -9).

by above grep command we are getting the lines which contains that particular user id right ?