Wednesday, March 24, 2021

How to check which users logged and its time in linux server

 Someone in the server deleted a file. I need to know which user logged in also I need the IP


cat /var/log/secure | grep Accepted | awk '{print $1,$2,$3,$6,$11}'

Mar 22 03:52:19 Accepted 157.49.207.225

Mar 22 04:23:55 Accepted 202.83.59.155

No comments:

Post a Comment