Linux User Management (3) Detailed explanation on how to view user login time and command history

1. View the currently logged in user information
who command:
The default output of who includes user name, terminal type, login date and remote host.
who /var/log/wtmp
You can view every login since the wtmp file was created
(1) -b: View the last system startup time
(2) -H: Print the title of each column

users command:
Print the currently logged in users, each displayed user name corresponds to a login session.

2. View command history
Each user has a command history record
View $HOME/.bash_history
Or enter in the terminal: history

3. last Command
ViewUser loginHistory
This command will read the /var/log/wtmp file; /var/log/btmp can display remote login information.
Last prints the login information of all users by default.
If you want to print the login information of a certain user, you can use
last Username

Options:
(1)-x: Display system power on and off and execution level information
(2)-a: Display login ip on the last line
(3) -f: Read a specific file, you can choose -f /var/log/btmp file
(4) -d: Convert the IP address to a host name
(5) -n: Set the display of the list Number of columns
(6) -t: View user login history at the specified time
For example:
last -t 20150226160404
Display the login history before this timestamp

4. Lastlog command
View the latest login history of all users
The command will read the /var/log/lastlog file; user The sorting order is according to the order in /etc/passwd
Options:
(1) -u: View the last login history of a user
For example: lastlog -u test
View the login history of user test
(2) -t: View the user login history in the past few days
For example: lastlog -t 1
View the login history within the last day
(3) -b: View the user login history before the specified number of days
For example: lastlog -b 60
View user login history 60 days ago

5, ac command
Report the user connection time (hours) based on the login and exit times in the /var/log/wtmp file, and the default output report is the total time
(1)-p: Display the connection time of each user
(2)-d: Display the daily connection time
(3) -y: Display the year, used in conjunction with -d

1. View the currently logged in user information
who command:
The default output of who includes user name, terminal type, login date and remote host.
who /var/log/wtmp
You can view every login since the wtmp file was created
(1) -b: View the last system startup time
(2) -H: Print the title of each column

users command:
Print the currently logged in users, each displayed user name corresponds to a login session.

2. View command history
Each user has a command history record
View $HOME/.bash_history
Or enter in the terminal: history

3. last Command
View user login history
This command will read the /var/log/wtmp file; /var/log/btmp can display remote login information.
Last prints the login information of all users by default.
If you want to print the login information of a certain user, you can use
last Username

Options:
(1)-x: Display system power on and off and execution level information
(2)-a: Display login ip on the last line
(3) -f: Read a specific file, you can choose -f /var/log/btmp file
(4) -d: Convert the IP address to a host name
(5) -n: Set the display of the list Number of columns
(6) -t: View user login history at the specified time
For example:
last -t 20150226160404
Display the login history before this timestamp

4. Lastlog command
View the latest login history of all users
The command will read the /var/log/lastlog file; the order of users is according to /etc/ Sequence
options in passwd:
(1) -u: View the last login history of a user
For example: lastlog -u test
View the login history of user test
(2) -t: View the user login history in the past few days
For example: lastlog -t 1
View the login history within the last day
(3) -b: View the user login history before the specified number of days
For example: lastlog -b 60
View user login history 60 days ago

5, ac command
Report the user connection time (hours) based on the login and exit times in the /var/log/wtmp file. The default output report is the total time
(1)-p: Display the connection time of each user
(2)-d: Display the daily connection time
(3)-y: Display the year, used with -d

The above is the detailed content of Linux User Management (3) Detailed explanation on how to view user login time and command history. For more information, please follow other related articles on the PHP Chinese website!