Logging all commands executed by user root to LogLogic device
"Bahto, Richard" <[email protected]> Wed, 27 Jun 2012 15:52:20 -0400
| Newsgroups | gmane.os.solaris.managers |
|---|---|
| Message-ID | <E7F19C9CF8C9D8498A2184FB3EA3FF462C902704@msg21usa.usa.glb.tru.com> |
I am now being asked to send every command that root executes to a LogLogic device. One of my collages have successfully done this on his Linux servers using the following I have add following entry on /etc/bashrc & /etc/syslog.conf files and restart the syslog deamon. cat /etc/bashrc export PROMPT_COMMAND='history -a >(logger -p local1.debug -t "$USER[$PWD] $SSH_CONNECTION")' cat /etc/syslog.conf # Loglogic Redirection authpriv.*;local1.* @xx.xx.xx.xx I have tried this as is ( adding the export command to /etc/profile since we don't have an /etc/bashrc ) and using auth.debug and local1.debug as the facility.level . I have been unsuccessful in my attempts and would appreciate any suggestions you would offer. Thanks in advance Richard Bahto ... ================================================================= This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message. To reply to our email administrator directly, send an email to [email protected]. Toys "R" Us, Inc.