This shows you the differences between two versions of the page.
Both sides previous revision Previous revision | |||
linux:linux_audit_user_commands [2025/09/14 20:55] manu |
linux:linux_audit_user_commands [2025/09/14 20:56] (current) manu |
||
---|---|---|---|
Line 11: | Line 11: | ||
local6.* /var/log/commands.log | local6.* /var/log/commands.log | ||
</code> | </code> | ||
+ | |||
+ | <cli prompt='$'> | ||
+ | $ tail -f /var/log/commands.log | ||
+ | Mar 28 14:23:56 ip-3-168-15-118 shell[9346]: docker ps | ||
+ | Mar 28 14:23:58 ip-3-168-15-118 shell[9346]: docker ps -a | ||
+ | Mar 28 14:26:01 ip-3-168-15-118 shell[9346]: cat /etc/rsyslog.conf | ||
+ | Mar 28 14:27:02 ip-3-168-15-118 shell[9346]: tail -f /var/log/commands.log | ||
+ | Mar 28 14:27:05 ip-3-168-15-118 shell[9346]: ls -lsh | ||
+ | Mar 28 14:27:07 ip-3-168-15-118 shell[9346]: pwd | ||
+ | </cli> | ||
+ | |||
+ | |||
+ |