UNIX for Dummies Questions & Answers

Hi everyone! It's been a while since I posted here!

Here's my question - Every week I check various logs (disk usage, etc), but the problem I'm finding with the user logs, is that they only go back a day, when I use the 'last' command. Is there any way of recording 7 day's worth of user access logs?

Thanks

The default root crontab cleans out /usr/adm/sulog, /etc/wtmp and /etc/wtmpx on Sunday mornings. The script that does this is /etc/cleanup.

If your machine is used at the time this script is run, you will want to change the time in crontab. If you want more than 1 week's information in these files, you need to change its frequency.

It sounds as if someone changed it to run once a day in your case.

Hi RMT, thanks for getting back to me. Unfortuantely, the default script you mention doesn't exist in the /etc directory...

You might look for it with the find command - no telling where it might be - check your root's crontab - see if cleanup is run from there. If that doesn't pan out, then check when the file(s) are created - look for that day/time in root crontab or possibly another crontab (look what account owns the file - that account or root can change the files normally).