1,760
edits
Changes
→Overview
==Overview==
Most system administrators would like to know the utilization of their systems by their users. On a Linux system, each user's login records are normally stored in the binary file /var/log/wtmp. The login records in this binary file can not be viewed or edited directly using normal Linux text commands like 'less', 'cat', etc. The 'last' command is often used to display the login records stored in this file in a human readable form. Please check the man page of the 'last' command for available options. The following listing is a sample output of the 'last' command with the '-FFiw' flag on:
<pre>
$ last -FFiwavhuo rchan pts/9 10.4340.22291.35 236 Tue Feb 13 16:53:42 2018 - Tue Feb 13 16:57:02 2018 (00:03) clee18 cwsmith pts/6 10.40.43.94 Tue Feb 13 16:51:47 2018 - Tue Feb 13 16:56:13 2018 (00:04) clee18 mlee18 pts/6 10.40.43.94 Tue Feb 13 16:50:20 2018 - Tue Feb 13 16:51:27 2018 (00:01) shana pts/2 toroon4512w-lp13 Tue Feb 13 16:47:48 2018 - Tue Feb 13 16:58:31 2018 (00:10) hfang hfang171 pts/4 24.114.50.50 Tue Feb 13 16:31:38 2018 - Tue Feb 13 17:48:39 2018 (01:17) bigia pts/8 1024.247114.650.126 50 Tue Feb 13 1619:28:43 2018 - Tue Feb 13 1720:28:31 2018 (00:59) ckim16 rchan pts/2 10.40.91.236 Tue Feb 13 16:22:36 00 2018 - Tue Feb 13 16:45:10 00 2018 (00:2223) ddchan asmith pts/2 10.43.115.162 Tue Feb 13 16:19:29 2018 - Tue Feb 13 16:22:00 2018 (00:02)
tsliu2 pts/4 10.40.105.130 Tue Feb 13 16:17:21 2018 - Tue Feb 13 16:30:10 2018 (00:12)
</pre>