We have enabled logging to Syslog and our Corporate Security guys are really happy with what they see as the logging of LiquidFiles is quite verbose. The only thing that is missing for them is when someone (e.g. root) logs into the console and then executes commands. While the login and logout is logged in the Linux section of the log, the commands executed are not. Is there a way to log any executed commands? Many thanks.
In the System logs are logged (and forwarded when a rsyslog server was set) only the logins and logouts. But the commands which root executed are archived, you can list them with the history command.