Closed v-zhuravlev closed 5 years ago
like so tail -1000 /var/log/auth.log
Apr 19 20:18:34 ubuntu-eeepc sudo: zabbix : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -A /dev/sda -d sat Apr 19 20:18:34 ubuntu-eeepc sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 19 20:18:34 ubuntu-eeepc sudo: pam_unix(sudo:session): session closed for user root Apr 19 20:18:44 ubuntu-eeepc sudo: zabbix : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -H /dev/sda -d sat Apr 19 20:18:44 ubuntu-eeepc sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 19 20:18:44 ubuntu-eeepc sudo: pam_unix(sudo:session): session closed for user root Apr 19 20:23:34 ubuntu-eeepc sudo: zabbix : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -A /dev/sda -d sat Apr 19 20:23:34 ubuntu-eeepc sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 19 20:23:34 ubuntu-eeepc sudo: pam_unix(sudo:session): session closed for user root Apr 19 20:23:44 ubuntu-eeepc sudo: zabbix : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -H /dev/sda -d sat Apr 19 20:23:44 ubuntu-eeepc sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 19 20:23:45 ubuntu-eeepc sudo: pam_unix(sudo:session): session closed for user root Apr 19 20:28:34 ubuntu-eeepc sudo: zabbix : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -A /dev/sda -d sat Apr 19 20:28:34 ubuntu-eeepc sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 19 20:28:34 ubuntu-eeepc sudo: pam_unix(sudo:session): session closed for user root Apr 19 20:28:44 ubuntu-eeepc sudo: zabbix : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -H /dev/sda -d sat Apr 19 20:28:44 ubuntu-eeepc sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 19 20:28:44 ubuntu-eeepc sudo: pam_unix(sudo:session): session closed for user root Apr 19 20:33:34 ubuntu-eeepc sudo: zabbix : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -A /dev/sda -d sat Apr 19 20:33:34 ubuntu-eeepc sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 19 20:33:34 ubuntu-eeepc sudo: pam_unix(sudo:session): session closed for user root Apr 19 20:33:44 ubuntu-eeepc sudo: zabbix : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -H /dev/sda -d sat Apr 19 20:33:44 ubuntu-eeepc sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 19 20:33:45 ubuntu-eeepc sudo: pam_unix(sudo:session): session closed for user root Apr 19 20:38:34 ubuntu-eeepc sudo: zabbix : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -A /dev/sda -d sat Apr 19 20:38:34 ubuntu-eeepc sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 19 20:38:34 ubuntu-eeepc sudo: pam_unix(sudo:session): session closed for user root Apr 19 20:38:44 ubuntu-eeepc sudo: zabbix : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -H /dev/sda -d sat Apr 19 20:38:44 ubuntu-eeepc sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 19 20:38:44 ubuntu-eeepc sudo: pam_unix(sudo:session): session closed for user root Apr 19 20:43:34 ubuntu-eeepc sudo: zabbix : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -A /dev/sda -d sat Apr 19 20:43:34 ubuntu-eeepc sudo: pam_unix(sudo:session): session opened for user root by (uid=0) Apr 19 20:43:34 ubuntu-eeepc sudo: pam_unix(sudo:session): session closed for user root Apr 19 20:43:44 ubuntu-eeepc sudo: zabbix : TTY=unknown ; PWD=/ ; USER=root ; COMMAND=/usr/sbin/smartctl -H /dev/sda -d sat
@vazhnov , @alllel please review debian package part if you don't mind. Thank you.
hope it's ok :)
like so tail -1000 /var/log/auth.log