Where to find the user log?

kamil · 04-05-2002, 09:35 AM

I have a mandrake linux box which operates as a web server. I created a login on it for myself and 2 friends. Now I'm searching for the file that hold the log of all login/logout actions. Where do I find this log file?

TIA,

Kamil

hanzerik · 04-05-2002, 05:32 PM

On my RedHat and slackware systems it logs logins in /var/log/messages

I guess you are talking about logins from ssh or the console.

kamil · 04-05-2002, 06:10 PM

There is no such directory on my box...I already went through the /var/log dir course it seemed like a logical place to me.
And the log I'm looking for are of all user logins. Preferably local and remote.

Kamil

hanzerik · 04-05-2002, 08:31 PM

Theres not a file called messages in /var/log/ ? Hhhmmm strange. Take a look in all the log files in /var/log maybe your distro names them different.

finegan · 04-06-2002, 04:10 AM

/var/log/messages sometimes goes by /ver/log/syslog, but really I think you're looking for /var/log/lastlog, which you can look through with the simple command: "last"

RH I know does a monthly rotate on the lastlog which Deb and Slack just let it run on forever. My guess is Mandy rotates it, but there has to be an easy tool to configure that. The rotated out version is probably somewhere in /var/log just compressed.

Cheers,

Finegan