[Sunhelp] logging

Dale Ghent sunhelp at sunhelp.org
Tue Oct 31 12:13:06 CST 2000


On Tue, 31 Oct 2000, Bob C. Ruddy wrote:

| 
| Look at the proccess accounting packages. They will let you know who ran
| what command, when, and how many resources the command took from the
| system. Again you will find proceedures on docs.sun.com like previously
| mentioned.

Yeah, but that's not quite what I was looking for. Process acounting wont
record one very basic thing... the whole argument string to a
command. It'll only record argv[0].

Sure, I'll know that user root ran rm at such-and-such time. But what
file did he rm ?

Simple stuff like that is lacking.

/dale




More information about the SunHELP mailing list