Wednesday, March 24, 2021

How to check which users logged and its time in linux server

 Someone in the server deleted a file. I need to know which user logged in also I need the IP

cat /var/log/secure | grep Accepted | awk '{print $1,$2,$3,$6,$11}'

Mar 22 03:52:19 Accepted

Mar 22 04:23:55 Accepted

No comments:

Post a Comment