User Auditing

Rob DeSanno rdesanno at gmail.com
Thu Sep 23 13:40:27 UTC 2010


This should be an easy question.

I use Logwatch on all of my RHEL servers and would like for it to also
report on all commands that any user had typed when logged in as well.
Something along the lines of UID: Command to give me an idea of who was
doing what at any given period of time.

I tried using snoopy but that gave me much more than I was looking for. I'm
now playing around with psacct and logger but was curious to know what
everyone else out there uses to monitor user activity besides looking into
everyone history file.

Thanks in advance!
~Rob



More information about the redhat-list mailing list