Logging to Syslog: Command execution

Discussion in 'LiquidFiles General' started by Pascal de Vries, Aug 30, 2024.

Tags:
  1. Pascal de Vries

    Pascal de Vries New Member

    Joined:
    Jan 16, 2024
    Messages:
    6
    Likes Received:
    0
    We have enabled logging to Syslog and our Corporate Security guys are really happy with what they see as the logging of LiquidFiles is quite verbose.

    The only thing that is missing for them is when someone (e.g. root) logs into the console and then executes commands. While the login and logout is logged in the Linux section of the log, the commands executed are not. Is there a way to log any executed commands?

    Many thanks.
     
  2. David

    David Administrator
    Staff Member

    Joined:
    Dec 1, 2015
    Messages:
    795
    Likes Received:
    31
    In the System logs are logged (and forwarded when a rsyslog server was set) only the logins and logouts.
    But the commands which root executed are archived, you can list them with the history command.
     

Share This Page