07-14-2009
Script to identify logged users & commands executed
Hi All,
I am trying to write a script to get the user information & the command executed.
I tried something like this :
w | sort | awk '{print$5$6$7}'
My requirement is to identify the users who execute the same command at same time.
I need the user name & the command in a separate file.
For ex :
User a executing rm command at 12 hrs
User b executing rm command at 12 hrs
then i need the o/p file as
User A rm 12hrs
User B rm 12 hrs
Can some one give any idea on this.
Thanks,
Vijay
9 More Discussions You Might Find Interesting
1. Shell Programming and Scripting
in unix what is the syntax to find out how many users are currently logged in (4 Replies)
Discussion started by: trichyselva
4 Replies
2. Shell Programming and Scripting
Hi,
Here is the script that I have written to check if a particular user is has logged out, and if yes, then a mail needs to be sent to the management the details of whatever has been captured by the script command.
echo "The current users are:"
who | awk '{print $1}' | sort > temp1
cp... (1 Reply)
Discussion started by: ggayathri
1 Replies
3. Shell Programming and Scripting
I have searched the forums but have not mangaed to quite find what im looking for. I have used to /etc/passwd command to present me a list of all users the who command to present all users currently logged on, but what i want to know is what command can i use to display users that are registered... (12 Replies)
Discussion started by: warlock129
12 Replies
4. UNIX for Dummies Questions & Answers
How do I find this out? I have a feeling its a simple command such as who, but I just don't know what it is. I've had a search on here but either I can't put it into the right search criteria or there isn't a topic on it.
Thanks.
EDIT: Delete this thread, as I posted it I noticed the... (0 Replies)
Discussion started by: chris_rabz
0 Replies
5. Shell Programming and Scripting
My admin needs a shell script in Korn that will show conditions based on users logged in. I have never used the Korn shell and have no clue what I am doing, can anyone help.
here are the conditions that need to be returned.
if users are below 5
displays should be: performance is high
if... (1 Reply)
Discussion started by: vthokiefan
1 Replies
6. Shell Programming and Scripting
Can someone help me with a script to capture the list of users logged on at a point of time, and if a particular user id say xyz exists, kill that process Id. (2 Replies)
Discussion started by: ggayathri
2 Replies
7. Shell Programming and Scripting
hi,
Do anybody know, how to list out all the commands & scripts used by the user & root along with the timestamps under ksh & csh shells.
Thanks in advance
Regards
BS (1 Reply)
Discussion started by: raghunsi
1 Replies
8. UNIX for Dummies Questions & Answers
Hi,
I am a user, do have root if needed via sudo. We are using Solaris.
In my home directory, i have only one file ending with "rc" in it, "local.cshrc." I am guessing this is c shell kernel config file.
Can I confirm that shell i am logged into is cshell ? How to set up so that i can use... (3 Replies)
Discussion started by: dude1113
3 Replies
9. Shell Programming and Scripting
Dear All,
I need your help in finding out users not logged in to linux system for more than 90 days. I found a script from our forum i am getting error while using that.
from the code i have debugged line by line to see where i am getting the problem. i found out the below line i am getting... (5 Replies)
Discussion started by: Sachinlinux
5 Replies
LEARN ABOUT REDHAT
lastcomm
LASTCOMM(1) General Commands Manual LASTCOMM(1)
NAME
lastcomm - print out information about previously executed commands.
SYNOPSIS
lastcomm
[ command-name ... ]
[ user-name ... ]
[ terminal-name ... ]
[ --strict-match ]
[ -f filename | --file filename ]
[ --user name ] [ --command name ] [ --tty name ]
[ --debug ] [ -V | --version ] [ -h | --help ]
DESCRIPTION
lastcomm prints out information about previously executed commands. If no arguments are specified, lastcomm will print info about all of
the commands in acct (the record file). If called with one or more of command-name, user-name, or terminal-name, only records containing
those items will be displayed. For example, to find out which users used command `a.out' and which users were logged into `tty0', type:
lastcomm a.out tty0
This will print any entry for which `a.out' or `tty0' matches in any of the record's fields (command, name, or terminal). If you want to
find only items that match *all* of the arguments on the command line, you must use the '-strict-match' option. For example, to list all
of the executions of command a.out by user root on terminal tty0, type:
lastcomm --strict-match a.out root tty0
The order of the arguments is not important.
For each entry the following information is printed:
+ command name of the process
+ flags, as recorded by the system accounting routines:
S -- command executed by super-user
F -- command executed after a fork but without a following exec
C -- command run in PDP-11 compatibility mode (VAX only)
D -- command terminated with the generation of a core file
X -- command was terminated with the signal SIGTERM
+ the name of the user who ran the process
+ time the process exited
OPTIONS
--strict-match
Print only entries that match *all* of the arguments on the command line.
--user name
List records for user with name. This is useful if you're trying to match a username that happens to be the same as a command
(e.g., ed ).
--command name
List records for command name.
--tty name
List records for tty name.
-f filename, --file filename
Read from the file filename instead of acct
--debug
Print verbose internal information.
-V, --version
Print the version number of lastcomm.
-h, --help
Prints the usage string and default locations of system files to standard output and exits.
FILES
acct
The system wide process accounting file. See acct(5) (or pacct(5)) for further details.
AUTHOR
The GNU accounting utilities were written by Noel Cragg <noel@gnu.ai.mit.edu>. The man page was adapted from the accounting texinfo page by
Susan Kleinmann <sgk@sgk.tiac.net>.
SEE ALSO
last(1), acct(5)
1995 October 31 LASTCOMM(1)