How To find Out which User has rebooted Linux server

Q- I want to find the user who has rebooted the Linux Box

First type “last” and you should get some idea.
==
Audit logs or messages/syslog should have logged the reboot command. You could try a grep for “shutdown -r ”
====
grep reboot /home/*/.bash_history
you can get which user rebooted the server.
How To find Out which User has rebooted Linux server How To find Out which User has rebooted Linux server Reviewed by TecGeeks on November 28, 2017 Rating: 5

No comments:

Get Your Business Online Now


Powered by Blogger.