Discussions related to DevOps, AI, Cloud
Someone in the server deleted a file. I need to know which user logged in also I need the IP
cat /var/log/secure | grep Accepted | awk '{print $1,$2,$3,$6,$11}'
Mar 22 03:52:19 Accepted 157.49.207.225
Mar 22 04:23:55 Accepted 202.83.59.155
No comments:
Post a Comment