12-02-2019
Does the output from last show you who (and where from) people were logged in at that time? Look especially for lines that say down in them.
Does that help you?
It might help in future if you logged all commands run by root to the syslog. Anything run by sudo may well be in /var/log/secure already.
Kind regards,
Robin
These 2 Users Gave Thanks to rbatte1 For This Post:
9 More Discussions You Might Find Interesting
1. UNIX for Dummies Questions & Answers
How do I cahnge my plan under my profile? (5 Replies)
Discussion started by: D3adRabbit
5 Replies
2. Shell Programming and Scripting
:D could any one answer my previous question...
just looked through logg and found no such question that I had asked.. please any input would help \..
:confused: (2 Replies)
Discussion started by: moxxx68
2 Replies
3. Solaris
Hi Guru's
Can any want here could explain to me the different between soft reboot and hard reboot .
Best Regards
Seelan (3 Replies)
Discussion started by: seelan3
3 Replies
4. Shell Programming and Scripting
Hi All
Plz guide me in setting ssh on local machine so that password will not be asked.
I have written a script abc.ksh on machineA to execute a script sampletest.ksh available on machineB
Conent of abc.ksh is as follows
ssh -q bali@machineB sh ClaimGenFeed/claim/sampletest.ksh... (1 Reply)
Discussion started by: balireddy_77
1 Replies
5. Programming
Submit the program asked to write in the interview
eg. write a prog to generate fibonacci series using recursion (2 Replies)
Discussion started by: useless79
2 Replies
6. AIX
Dear All
i am working on windows plattform and i am interested in Aix so i have done IBM Aix certification, can you please suggest Aix filed is good for my carrier,currently i am working as Desktop admin
edit by bakunin: please understand that the question you raised has nothing to do with the... (1 Reply)
Discussion started by: manzur13
1 Replies
7. Shell Programming and Scripting
Hello all, I am trying to pass or trying to get a variable assinged...but seemed like i am doing something wrong here....
so lets say abc.txt(spool the output out) is my file, where i am doing select * Fro mv$version inside my DB and getting some info.
-/home/oracle/logs >cat abc.txt
SQL>... (1 Reply)
Discussion started by: abdul.irfan2
1 Replies
8. Shell Programming and Scripting
Hi,
Whenever I open my unix box,after providing username and password I get the following message.
Are you authorised to use this computer as detailed above? (Y)es/(N)o : y
Export: Release 10.2.0.2.0 - Production on Mon May 16 16:00:15 2011
Copyright (c) 1982, 2005, Oracle. All rights... (5 Replies)
Discussion started by: emilybose
5 Replies
9. UNIX for Beginners Questions & Answers
i have tried to use a sudo command from a user level . but instead of asking for user password it asked for root password . how should i go about it .
james@opensuse:/etc> sudo ifconfig
root's password:
And i wish to ask how should i allow a list of command to be allowed to used for a... (4 Replies)
Discussion started by: lobsang
4 Replies
LAST,LASTB(1) Linux System Administrator's Manual LAST,LASTB(1)
NAME
last, lastb - show listing of last logged in users
SYNOPSIS
last [-R] [-num] [ -n num ] [-adFiowx] [ -f file ] [ -t YYYYMMDDHHMMSS ] [name...] [tty...]
lastb [-R] [-num] [ -n num ] [ -f file ] [-adFiowx] [name...] [tty...]
DESCRIPTION
Last searches back through the file /var/log/wtmp (or the file designated by the -f flag) and displays a list of all users logged in (and
out) since that file was created. Names of users and tty's can be given, in which case last will show only those entries matching the
arguments. Names of ttys can be abbreviated, thus last 0 is the same as last tty0.
When last catches a SIGINT signal (generated by the interrupt key, usually control-C) or a SIGQUIT signal (generated by the quit key, usu-
ally control-), last will show how far it has searched through the file; in the case of the SIGINT signal last will then terminate.
The pseudo user reboot logs in each time the system is rebooted. Thus last reboot will show a log of all reboots since the log file was
created.
Lastb is the same as last, except that by default it shows a log of the file /var/log/btmp, which contains all the bad login attempts.
OPTIONS
-f file
Tells last to use a specific file instead of /var/log/wtmp.
-num This is a count telling last how many lines to show.
-n num The same.
-t YYYYMMDDHHMMSS
Display the state of logins as of the specified time. This is useful, e.g., to determine easily who was logged in at a particular
time -- specify that time with -t and look for "still logged in".
-f file
Specifies a file to search other than /var/log/wtmp.
-R Suppresses the display of the hostname field.
-a Display the hostname in the last column. Useful in combination with the next flag.
-d For non-local logins, Linux stores not only the host name of the remote host but its IP number as well. This option translates the
IP number back into a hostname.
-F Print full login and logout times and dates.
-i This option is like -d in that it displays the IP number of the remote host, but it displays the IP number in numbers-and-dots nota-
tion.
-o Read an old-type wtmp file (written by linux-libc5 applications).
-w Display full user and domain names in the output.
-x Display the system shutdown entries and run level changes.
NOTES
The files wtmp and btmp might not be found. The system only logs information in these files if they are present. This is a local configura-
tion issue. If you want the files to be used, they can be created with a simple touch(1) command (for example, touch /var/log/wtmp).
FILES
/var/log/wtmp
/var/log/btmp
AUTHOR
Miquel van Smoorenburg, miquels@cistron.nl
SEE ALSO
shutdown(8), login(1), init(8)
Jul 31, 2004 LAST,LASTB(1)