A very useful reading for CentOS admins http://xmodulo.com/2014/09/monitor-user-login-history-centos-utmpdump.html.
I was using `last` and `lastb` earlier but feels we can get more information with `utmpdump`. Thanks for Gabriel Cánepa for his article.
Some short notes from his article
utmpdump /var/run/utmp - show who is currently logged on and what they are doing, and also by uptime to display system up time
utmpdump /var/log/wtmp - show the listing of last logged-in users
utmpdump /var/log/btmp - show the listing of last failed login attempts
These files are used in last and `lastb` commands to show details of login but by using utmpdump we get more flexibility for filtering
I was using `last` and `lastb` earlier but feels we can get more information with `utmpdump`. Thanks for Gabriel Cánepa for his article.
Some short notes from his article
utmpdump /var/run/utmp - show who is currently logged on and what they are doing, and also by uptime to display system up time
utmpdump /var/log/wtmp - show the listing of last logged-in users
utmpdump /var/log/btmp - show the listing of last failed login attempts
These files are used in last and `lastb` commands to show details of login but by using utmpdump we get more flexibility for filtering