2
As above, is there a syslog facility to capture users' activities in AIX? Or can this be done only through shell configurations (i.e. command history)?
2
As above, is there a syslog facility to capture users' activities in AIX? Or can this be done only through shell configurations (i.e. command history)?
1
I believe you can enable process accounting
touch /var/adm/pacct
chmod 666 /var/adm/pacct
su – adm -c /usr/lib/acct/nulladm /var/tmp/wtmp /var/adm/pacct
su – root -c /usr/sbin/acct/startup
- from FreeUnixTips
By using the acctcom
command you should be able to view a list of programs run by users.
Each record represents one completed process. The default display consists of the command name, user name, tty name, start time, end time, real seconds, CPU seconds, and mean memory size (in kilobytes). These default items have the following headings in the output: COMMAND START END REAL CPU MEAN NAME USER TTYNAME TIME TIME (SECS) (SECS) SIZE(K)