2

As above, is there a syslog facility to capture users' activities in AIX? Or can this be done only through shell configurations (i.e. command history)?

1 Answer 1

1

I believe you can enable process accounting

touch /var/adm/pacct
chmod 666 /var/adm/pacct
su – adm -c /usr/lib/acct/nulladm /var/tmp/wtmp /var/adm/pacct
su – root -c /usr/sbin/acct/startup

- from FreeUnixTips

By using the acctcom command you should be able to view a list of programs run by users.

Each record represents one completed process. The default display consists of the 
command  name, user name, tty name, start time, end time, real seconds, CPU seconds, 
and mean memory size (in kilobytes). These default items have the following headings 
in the output:

 COMMAND                    START   END    REAL    CPU     MEAN
 NAME    USER    TTYNAME    TIME    TIME   (SECS)  (SECS)  SIZE(K)

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .