You can enable the command accounting tool. Not sure what OS you're using, but the package is usually named psacct.
Once enabled, you can display information for any running script and/or prog and all the commands associated with it:
Code:
cat myscript.sh
#!/bin/bash
date
uptime
./myscript.sh
Mon Oct 21 09:14:54 EDT 2013
09:14:54 up 2 days, 21:52, 8 users, load average: 0.04, 0.17, 0.13
lastcomm --user <username that ran the script> | more
myscript.sh username pts/1 0.00 secs Mon Oct 21 09:14
uptime username pts/1 0.00 secs Mon Oct 21 09:14
date username pts/1 0.00 secs Mon Oct 21 09:14
To enable it if not already installed, install the psacct package. Once installed follow the below steps using sudo or as root:
Code:
1. Create the empty accouting file:
touch /var/log/pacct
2. Run the accton command to turn on accounting:
accton on
Turning on process accounting, file set to the default '/var/log/pacct'.
3. Use the lastcomm command to view recently run commands:
By user:
lastcomm --user <username>
By command:
lastcomm --command <command>
List everything:
lastcomm
Hi all
I want to know the commands executed a by particular user .. for the whole day on my machine.
I have checked out with the commad
$lastcomm <user>
It is throwing an error called: ..
/var/adm/pacct: No such file or directory
Can u help me in this regard..
Thank U... (3 Replies)
Hi all,
I am new to unix OS.
Commands(external commands) given by the user are examined by shell and later executed by kernel.
Now I want to know how the internal(built in) commands are executed.
Please clarify whether they are executed directly by shell or by kernel.
Thanks in... (2 Replies)
Hi,
I have executed a set of commands on the linux server and later rebooted the server. Is it possible to get the details of the commands I executed prior to the reboot? If yes please let me know how?
Thanks. (1 Reply)
Dear friends,
Whenever I do logout from a session initiated by ssh/su, I need to print a small report which says the login time, logout time, commands got executed..
How can it be done?
I know when doing ssh, .profile file will get executed. Shall we do something with the help of it. (1 Reply)
hi,
Do anybody know, how to list out all the commands & scripts used by the user & root along with the timestamps under ksh & csh shells.
Thanks in advance
Regards
BS (1 Reply)
Here is two time I have:
Jul 12 16:02:01
Jul 13 01:02:01
and how can I do a simple match to get difference between two time which is 09:00:00
Thanks in advance. (3 Replies)
Hi,
I have cleared the commands by using >$HOME/.sh_history.
But if i issue HISTORY it shows some reference numbers but not the commands executed.
But i want to truncate those line numbers too.
May i know how i can achieve this?
Thanks (1 Reply)
On Solaris 10 server the system date won't match with the timestamp on files created by a cron jobs, Please help
here is what i get when i check for system date
infodba-ie10ux014:/tcpdv1_ie10/tcadmin/bin\n\r-> date
Tue Apr 24 15:27:43 GMT 2012at same time i executed a cron job, and checked... (4 Replies)
Discussion started by: karghum
4 Replies
LEARN ABOUT SUNOS
lastcomm
lastcomm(1) User Commands lastcomm(1)NAME
lastcomm - display the last commands executed, in reverse order
SYNOPSIS
lastcomm [-f file] [-x] [command-name] ... [user-name] ... [terminal-name] ...
DESCRIPTION
The lastcomm command gives information on previously executed commands. lastcomm with no arguments displays information about all the com-
mands recorded during the current accounting file's lifetime. If called with arguments, lastcomm only displays accounting entries with a
matching command-name, user-name, or terminal-name. If extended process accounting is active (see acctadm(1M)) and is recording the appro-
priate data items, lastcomm attempts to take data from the current extended process accounting file. If standard process accounting is
active, lastcomm takes data from the current standard accounting file (see acct(2)).
If terminal-name is `- -', there was no controlling TTY for the process. The process was probably executed during boot time. If terminal-
name is `??', the controlling TTY could not be decoded into a printable name.
For each process entry, lastcomm displays the following items of information:
o The command name under which the process was called.
o One or more flags indicating special information about the process. The flags have the following meanings:
F The process performed a fork but not an exec.
S The process ran as a set-user-id program.
o The name of the user who ran the process.
o The terminal which the user was logged in on at the time (if applicable).
o The amount of CPU time used by the process (in seconds).
o The date and time the process exited.
OPTIONS
The following options are supported:
-f file Uses file as the source of accounting data. file may be either an extended process accounting file or a standard process
accounting file.
-x Uses the currently active extended process accounting file. If extended processing accounting is inactive, no output will
be produced.
EXAMPLES
Example 1: Listing executions of named commands
The command
example% lastcomm a.out root term/01
produces a listing of all the executions of commands named a.out by user root while using the terminal term/01.
Example 2: Listing all user commands
The command
example% lastcomm root
produces a listing of all the commands executed by user root.
FILES
/var/adm/pacct standard accounting file
/var/adm/exacct/proc extended accounting file
ATTRIBUTES
See attributes(5) for descriptions of the following attributes:
+-----------------------------+-----------------------------+
| ATTRIBUTE TYPE | ATTRIBUTE VALUE |
+-----------------------------+-----------------------------+
|Availability |SUNWesu |
+-----------------------------+-----------------------------+
SEE ALSO last(1), acctadm(1M), acct(2), acct.h(3HEAD), sigvec(3UCB), core(4), attributes(5)SunOS 5.10 10 Jan 2000 lastcomm(1)