Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations Mike Lewis on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
How do you audit which user id delete files in CMS server?
- Thread starter 247star
- Start date
this probably varies with version numbers.
On my CMS 12 system, I can see what each user did by:
cd /export/home/{username}
more .sh_history
one caveat - if the user was su - (root) then you won't be able to tell who did it as root because the command history will be in root's history file.
On my CMS 12 system, I can see what each user did by:
cd /export/home/{username}
more .sh_history
one caveat - if the user was su - (root) then you won't be able to tell who did it as root because the command history will be in root's history file.
- Thread starter
- #3
AvayaTier3
Technical User
filename may have changed to .bash_history
Use "ls -al /export/home/cms" to see hidden filenames that begin with "."
If you are using the login that you want to check
"set | grep HIST" will show you where your history is stored.
A great teacher, does not provide answers, but methods to teach others "How and where to find the answers"
bsh
35 years Bell, AT&T, Lucent, Avaya
Tier 3 for 25 years and counting
Use "ls -al /export/home/cms" to see hidden filenames that begin with "."
If you are using the login that you want to check
"set | grep HIST" will show you where your history is stored.
A great teacher, does not provide answers, but methods to teach others "How and where to find the answers"
bsh
35 years Bell, AT&T, Lucent, Avaya
Tier 3 for 25 years and counting
- Status
Similar threads
- Locked
- Question