Dear friends,

How to know which commands has been run by a specific user. I tried history but it doesnt seem to have that option to tell me which user has executed what commands. I know I can see user history by using .bash_history command but I dont get to know which day/time they executed those commands.

Waiting for replies.

The bash shell saves a history file, but it will retain only unique commands. It is meant for the history features of the shell such as using "[CTRL]-r" to recall certain commands or ! to rerun the last command.

If the commands were called using sudo, such as "sudo /sbin/ifconfig", then there will be log entries of the command, possibly in /var/log/messages, but possibly in a different log depending on how your system is configured. If the user can use 'su -' or use 'sudo /bin/bash' or 'sudo vim' and uses the ":!" shell escape, then commands executed from that shell won't be logged.