LASTLOG(8) System Manager's Manual LASTLOG(8)NAME
lastlog - examine lastlog file
SYNOPSIS
lastlog [<-u|--user> login-name]
[<-t|--time> days] [<-h|--help>]
DESCRIPTION
lastlog formats and prints the contents of the last login log /var/log/lastlog file . The login-name, port, and last login time will be
printed. The default (no flags) causes lastlog entries to be printed, sorted by the numerical UID.
-u, --user login-name will cause the lastlog record for
login-name only to be printed
-t, --time days will cause only the lastlogins more recent
han fIdays to be printed
-h, --help print a one-line help message and exit.
The -t flag overrides the use of -u.
If the user has never logged in the message "**Never logged in**" will be displayed instead of the port and time.
FILES
/var/log/lastlog - lastlog logging file
CAVEATS
Large gaps in uid numbers will cause the lastlog program to run longer with no output to the screen (i.e. if mmdf=800 and last uid=170,
program will appear to hang as it processes uid 171-799).
AUTHORS
Julianne Frances Haugh (jockgrrl@ix.netcom.com) Phillip Street
LASTLOG(8)
Check Out this Related Man Page
LASTLOG(8) System Management Commands LASTLOG(8)NAME
lastlog - reports the most recent login of all users or of a given user
SYNOPSIS
lastlog [options]
DESCRIPTION
lastlog formats and prints the contents of the last login log /var/log/lastlog file. The login-name, port, and last login time will be
printed. The default (no flags) causes lastlog entries to be printed, sorted by their order in /etc/passwd.
OPTIONS
The options which apply to the lastlog command are:
-b, --before DAYS
Print only lastlog records older than DAYS.
-h, --help
Display help message and exit.
-R, --root CHROOT_DIR
Apply changes in the CHROOT_DIR directory and use the configuration files from the CHROOT_DIR directory.
-t, --time DAYS
Print the lastlog records more recent than DAYS.
-u, --user LOGIN|RANGE
Print the lastlog record of the specified user(s).
The users can be specified by a login name, a numerical user ID, or a RANGE of users. This RANGE of users can be specified with a min
and max values (UID_MIN-UID_MAX), a max value (-UID_MAX), or a min value (UID_MIN-).
If the user has never logged in the message ** Never logged in** will be displayed instead of the port and time.
Only the entries for the current users of the system will be displayed. Other entries may exist for users that were deleted previously.
NOTE
The lastlog file is a database which contains info on the last login of each user. You should not rotate it. It is a sparse file, so its
size on the disk is usually much smaller than the one shown by "ls -l" (which can indicate a really big file if you have in passwd users
with a high UID). You can display its real size with "ls -s".
FILES
/var/log/lastlog
Database times of previous user logins.
CAVEATS
Large gaps in UID numbers will cause the lastlog program to run longer with no output to the screen (i.e. if in lastlog database there is
no entries for users with UID between 170 and 800 lastlog will appear to hang as it processes entries with UIDs 171-799).
shadow-utils 4.1.5.1 05/25/2012 LASTLOG(8)
Hello,
we are running AIX 4.3.3, has anyone experienced an issue with the lastlog file where there are duplicate entries. ie.
# mkpasswd -c
#mkpasswd -c
/etc/security/lastlog ---> /etc/security/lastlog.idx
3004-779 Duplicate key found. "userazs"
3004-778 Index operation failed.... (1 Reply)
Hello there,
I "discovered" an interesting command lastlog, but I couldn't find, until now:cool:, if it's possible to get a list of the launched process by users and root during a certain of time...
...any idea would be really appreciated!!!
Thanks in advance.
Giordano Bruno (3 Replies)
Dear Friends ,
From 'last' or 'lastlog' command , I can get the last login informations of the users . now as a system admin , If I want to delete the log information from this 'last' 'lastog' command , then is it possible to do ?
plz inform ... ... (1 Reply)
There is also "host_last_login" information in a file /etc/security/lastlog .
If I login to an appl (on AIX) via 'rexec' from my pc, I can see there pc's name or its IP:
tty_last_login = rexec
host_last_login = 10.50.38.74
I already collect login time/date/user into my own log... (1 Reply)
Hi Folks,
Is there a way to cleanup the root entries in the Linux server from the lastlog.
For AIX and SUN server, this has been done Via the fwtmp command. (1 Reply)