I need to implement some kind of daemon that would check who logged in (with ip address) and when, what commands did that person use, and other basic stuff like differences in edited files that would help me to be sure what's going on in my system.

The log can be saved anywhere on the system (I don't need giant monitoring systems like zabbix etc.).

audit is ok, but it needs a lot of configuration, so I thought maybe there is something easier to use.

  • 1
    psacct (for CentOS/Fedora Linux / RHEL) or acct (for Ubuntu / Debian Linux) might be much easier and handy tool. And another one Snoopy – Rahul Sep 1 '16 at 7:17

It will be not filled in the correct answer to the your question, type last show you to who logged in with its IP addr.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.