Linux user activity log


New Member
Hi Team

I need assistance in getting command history in Centos for the user before and after su. The information that I need is basically what you get from bash_history but I need to see commands after the user switches to any other user on the system as well. I also need this information regardless of authentication used as there is either LDAP, AAA etc and not just PAM. The other problem is bash history can be easily deleted so I rather need something that cannot be deleted easily.


Active Member
The bash shell stores the history of commands you've run in your user account's history file at~/. bash_history by default. For example, if your username is bob, you'll find this file at /home/bob/.

Here the google search:

Hope that helps.
  • Like
Reactions: Rob

Members online

Latest posts