up vote 6 down vote favorite
3
share [g+] share [fb]

I would like to get a log of all processes that are launched with the time that they were launched and the arguments they were launched with. Is this possible in Linux?

link|improve this question
@new123456 that's exactly what I was looking for! Thanks a lot! I just tried it out and it works if I execute the command "auditctl -a task,always" after each reboot, ie. it doesn't start logging unless I execute this command, so this is perfect. – runeks Jun 1 '11 at 19:16
1  
@runeks All right, I've posted this as an answer so that this question can be marked answered. – new123456 Jun 1 '11 at 20:04
feedback

3 Answers

up vote 9 down vote

Your starting point should be auditd.

Try something like this:

apt-get install auditd
auditctl -a task,always
ausearch -i -sc execve
link|improve this answer
feedback
up vote 0 down vote

You can try cat ~/.bash_history There is system log viewer,this can help you out.

link|improve this answer
~/.bash_history only contains commands I've executed in a terminal, apparently. I'm looking for a log of all the programs executed, for example when I click an icon to open up my e-mail client, gedit, or I open up my browser, and my browser executes another process by itself. new123456's answer did the trick. – runeks Jun 1 '11 at 19:22
feedback
up vote 0 down vote

See this question. 

apt-get install auditd
auditctl -a task,always
ausearch -i -sc execve
link|improve this answer
feedback

Your Answer

 
or
required, but never shown
discard

Not the answer you're looking for? Browse other questions tagged or ask your own question.