Login or Register to Ask a Question and Join Our Community


AIX

last command

Login to Discuss or Reply to this Discussion in Our Community

 
Thread Tools Search this Thread
Operating Systems AIX last command
# 1  
Old 08-02-2010
Question last command
Hi,

I am unable to get the information regarding login and logoff information of user using last command , wheather any specific deamon or file needs to configured for capturing the output of last command

using aix5.3.7

Regards

Manoj
# 2  
Old 08-02-2010
Per default last should work - it reads /var/adm/wtmp. What are you missing? Users that are still logged in will be marked with "still logged in" as end time and others have a start and end time.

Don't you get something like:
Code:
root@srtshv01:/root> last
root      pts/0        someclient1       Jul 30 12:53 - 13:50  (00:57)
root      pts/3        someclient1       Jul 29 15:09 - 15:10  (00:00)
root      pts/2        someclient1       Jul 29 11:55 - 15:12  (03:17)
root      pts/1        someclient1       Jul 29 11:05   still logged in.
root      pts/0        someclient2       Jul 29 10:57 - 16:54  (05:57)
...

Smilie
Last edited by zaxxon; 08-02-2010 at 09:04 AM.. Reason: typo
# 3  
Old 08-02-2010
Question
Quote:
Originally Posted by zaxxon
Per default last should work - it reads /var/adm/wtmp. What are you missing? Users that are still logged in will be marked with "still logged in" as end time and others have a start and end time.

Don't you get something like:
Code:
root@srtshv01:/root> last
root      pts/0        someclient1       Jul 30 12:53 - 13:50  (00:57)
root      pts/3        someclient1       Jul 29 15:09 - 15:10  (00:00)
root      pts/2        someclient1       Jul 29 11:55 - 15:12  (03:17)
root      pts/1        someclient1       Jul 29 11:05   still logged in.
root      pts/0        someclient2       Jul 29 10:57 - 16:54  (05:57)
...

Smilie
Thanks zaxxon, actually I am getting below output, OS is not showing current dates output. it is showign old date login and logout
Code:
bash-3.00# date
Mon Aug  2 19:47:07 IST 2010
bash-3.00# last
reboot    ~                                   Jan 27 10:37
shutdown  vty0                                Jan 27 10:35
reboot    ~                                   Dec 02 10:22
shutdown  vty0                                Dec 02 10:21
reboot    ~                                   Oct 28 09:56
shutdown  vty0                                Oct 28 09:55
root      vty0                                Mar 26 16:30 - 16:34  (00:03)
reboot    ~                                   Mar 26 16:29
root      pts/0        1.1.1.1                Feb 18 11:30 - 10:36  (23:05)
reboot    ~                                   Feb 01 19:15
shutdown  vty0                                Feb 01 18:47
root      vty0                                Feb 01 18:39 - 18:41  (00:02)
root      vty0                                Feb 01 18:25 - 18:25  (00:00)
reboot    ~                                   Feb 01 17:45
shutdown  vty0                                Feb 01 15:22
root      vty0                                Jan 31 14:49 - 14:54  (00:04)
reboot    ~                                   Jan 31 14:49
root      vty0                                Jan 31 12:25 - 12:34  (00:08)
reboot    ~                                   Jan 31 12:24
reboot    ~                                   Jan 29 13:39
shutdown  vty0                                Jan 29 12:49
root      ftp                                 Jan 29 12:34 - 12:35  (00:00)
root      pts/0        1.1.1.1.               Jan 29 12:30 - 12:48  (00:17)
root      pts/0        1.1.1.1                Jan 25 14:32 - 16:02  (01:30)
root      vty0                                Jan 25 11:58 - 14:32  (02:34)
reboot    ~                                   Jan 25 11:56
root      vty0                                Jan 25 10:37 - 11:34  (00:57)
root      vty0                                Jan 24 20:06 - 00:38  (04:31)
reboot    ~                                   Jan 24 20:04

wtmp begins     Jan 24 20:04

Regards,

Manoj
Last edited by Scott; 08-02-2010 at 11:27 AM.. Reason: Code tags, please...
# 4  
Old 08-02-2010
I see now, you are missing a lot of entries. Maybe check if your /var is full (that would be interessting nobody noticed for more than a half year) or if the file max size limits have been reached, which should be unlimited for root (ulimits) and some big value for jfs2 (16 TB) which is very unlikely.

If you find nothing and don't need the old entries, I would just zero it with
Code:
nulladm wtmp

and check if it accepts new entries.
# 5  
Old 08-03-2010
Question
Quote:
Originally Posted by zaxxon
I see now, you are missing a lot of entries. Maybe check if your /var is full (that would be interessting nobody noticed for more than a half year) or if the file max size limits have been reached, which should be unlimited for root (ulimits) and some big value for jfs2 (16 TB) which is very unlikely.

If you find nothing and don't need the old entries, I would just zero it with
Code:
nulladm wtmp

and check if it accepts new entries.
Thanks zaxxon for your quick response, I have checked /var file system it was just 11% utilized, ulimit was "-1" for file max size,

At last I have rebooted the server. Now it is showing correct login with dates.

But what was problem HOw I will get the information. wheather any service was stucked?

Regards

Manoj
# 6  
Old 08-03-2010
Page 51, "3.1.4.1 The init demon" of http://www.redbooks.ibm.com/redbooks/pdfs/sg246020.pdf describes how it works ie. which processes write to wtmp.
Maybe there was something messed up which has been fixed up by a reboot. It could simply be fixed with a later TL/SP. If this is not occuring often I would not waste time on searching for the reason.
# 7  
Old 08-03-2010
try
Code:
audit start

or
Code:
audit --help
Login or Register to Ask a Question

Previous Thread | Next Thread

10 More Discussions You Might Find Interesting

1. UNIX for Beginners Questions & Answers

Another one line command where I'd like to determine if Ubuntu or Red Hat when running command

Hello Forum, I'm making very good progress on my report thanks to the very helpful people on this forum. I've been able to successfully create my report for my Red Hat servers. But I do have a few ubuntu servers in the mix and I'd like to capture some data from them when an ssh connection is... (8 Replies)
Discussion started by: greavette
8 Replies

2. AIX

I'm facing problem with rpm command, when running the command and appears this error:

exec(): 0509-036 Cannot load program /usr/opt/freeware/bin/rpm because of the following errors: 0509-022 Cannot load module /opt/freeware/lib/libintl.a(libintl.so.1). 0509-150 Dependent module /opt/freeware/lib/libiconv.a(shr4.o) could not be loaded. 0509-152 Member... (4 Replies)
Discussion started by: Ohmkar
4 Replies

3. Shell Programming and Scripting

Multiple command execution inside awk command during xml parsing

below is the output xml string from some other command and i will be parsing it using awk cat /tmp/alerts.xml <Alert id="10102" name="APP-DS-ds_ha-140018-componentFailure-S" alertDefinitionId="13982" resourceId="11427" ctime="1359453507621" fixed="false" reason="If Event/Log Level(ANY) and... (2 Replies)
Discussion started by: vivek d r
2 Replies

4. Shell Programming and Scripting

SH script, variable built command fails, but works at command line

I am working with a sh script on a solaris 9 zone (sol 10 host) that grabs information to build the configuration command line. the variables Build64, SSLopt, CONFIGopt, and CC are populated in the script. the script includes CC=`which gcc` CONFIGopt=' --prefix=/ --exec-prefix=/usr... (8 Replies)
Discussion started by: oly_r
8 Replies

5. UNIX for Dummies Questions & Answers

passing command output from one command to the next command in cshell

HI Guys, I hope you are well. I am trying to write a script that gets executed every time i open a shell (cshell). I have two questions about that 1) I need to enter these commands $ echo $DISPLAY $ setenv $DISPLAY output_of_echo_$display_command How can i write a... (2 Replies)
Discussion started by: kaaliakahn
2 Replies

6. UNIX for Advanced & Expert Users

unix command : how to insert text at the cursor location via command line?

Hi, Well my title isn't very clear I think. So to understand my goal: I have a script "test1" #!/bin/bash xvkbd -text blabla with xbindkeys, I bind F5 key in order it runs my test1 script So when I press F5, test1 runs. I'm under Emacs/Vi and I press F5 in order to have "blabla" be... (0 Replies)
Discussion started by: xib.be
0 Replies

7. Shell Programming and Scripting

Need help! command working ok when executed in command line, but fails when run inside a script!

Hi everyone, when executing this command in unix: echo "WM7 Fatal Alerts:", $(cat query1.txt) > a.csvIt works fine, but running this command in a shell script gives an error saying that there's a syntax error. here is content of my script: tdbsrvr$ vi hc.sh "hc.sh" 22 lines, 509... (4 Replies)
Discussion started by: 4dirk1
4 Replies

8. AIX

AIX:Command to get netaddress/subnet address command in IPv4/IP6

AIX:Command to get netaddress/subnet address command in IPv4/IP6 Can anybody help us with a command to retrieve netaddress/subnet address command in IPv4/IP6 on aix machine. net/subnet address is in the format 172.16.212.0(signifies all 255 machines in an IPv4 network) (2 Replies)
Discussion started by: rookie8278
2 Replies

9. Shell Programming and Scripting

assign a command line argument and a unix command to awk variables

Hi , I have a piece of code ...wherein I need to assign the following ... 1) A command line argument to a variable e.g origCount=ARGV 2) A unix command to a variable e.g result=`wc -l testFile.txt` in my awk shell script When I do this : print "origCount" origCount --> I get the... (0 Replies)
Discussion started by: sweta_doshi
0 Replies

10. SuSE

inconsistent ls command display at the command prompt & running as a cron job

Sir, I using the following commands in a file (part of a bigger script): #!/bin/bash cd /opt/oracle/bin ls -lt | tail -1 | awk '{print $6}' >> /tmp/ramb.out If I run this from the command prompt the result is: 2007-05-16 if I run it as a cron job then... (5 Replies)
Discussion started by: rajranibl
5 Replies
Login or Register to Ask a Question