Track the Server Activity!!!

[arjagadish]

Hellow to All,

I need to track the server activities on my RedHat Linux 7.2/7.3 Server.

Is there any way to do it.

Basically, like who is accessing which file, who deleted the files and logs like that.

Thx in Advance.

 

[mrregan]

Hi,
The .bash_history files in the home directories will give you some recent history of activity.

 

[msteder]

You could also put a script command in the login file .bashrc, .profile, etc... depending on the shell they login with.

script /home/dummy/script.txt

This will script everything that crosses a users screen.

 

[dahven]

Tripwire is pretty easy to set up, it will track file changes and times.

http://www.tripwire.org/

also on the install cds from RedHat