Finding valid and invalid logins

Harlin · 02-14-2006, 08:48 AM

We have a box at work here that's been running for the past two years. However, in /var/log/messages (and message.1, message.2, etc) there is nothing showing logins from before the last 2 months. Anyone know why this is? I would like to be able to find login information over at least the last 60 days. Anyone have an idea of how I can find this information?

anon237 · 02-14-2006, 09:16 AM

Hi,

You could try the last command.

It does depend on /var/log/wtmp, see man last for details.

Hope this helps.