Finding out whether a script ran

[ddrillich]

Good Day,

A certain component went down a couple of days ago. It has an associated StopContent.sh script. Is there a way to find out if this script ran during this time frame?

Regards,
Dan

 

[Annihilannic]

Not unless you have some kind of auditing enabled (check /var/log/audit for output files) or the script has some logging, which it should but I presume hasn't since you're asking the question!

Annihilannic.

 

[ddrillich]

Thank you Annihilannic.

The script doesn't have logging and not much luck with /var/log/audit as I don't have access...

[autonomy@sbkj2ksrcharcidxp01 log]$ pwd
/var/log

[autonomy@sbkj2ksrcharcidxp01 log]$ \ls -ltr
total 3488
drwxr-x--- 2 root root 4096 Mar 5 2007 audit
drwxr-xr-x 2 root root 4096 Feb 15 2008 mail
-rw------- 1 root root 23335 Feb 15 2008 anaconda.syslog
-rw------- 1 root root 17103 Feb 15 2008 anaconda.log
-rw-r--r-- 1 root root 0 Feb 15 2008 mcelog
......

Regards,
Dan

 

[Annihilannic]

You'd need your sysadmin to review the audit logs; but judging by the directory size of 4096 bytes I'd say it's probably empty.

I know I generally turn off auditing because of the massive amounts of data it generates.

Annihilannic.

 

[ddrillich]

Much appreciated Annihilannic.