Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Is there any specific open source tool which can be used to monitor what users are doing on linux system. I have multiple servers and with access to some users on them. I want to monitor which user ran which commands at what time. I want it to be monitored from Centralized server. I know about tripwire,sysstat. But those are not full filling my requirements.

Please suggest.

Thanks Ramesh

share|improve this question

3 Answers 3

up vote 1 down vote accepted

Check OSSEC,

It can do file integrity checks, besides it can monitor syslog/audit.log and forward it to centralize OSSEC server, and if you write correct rules even notify you when user runs something wrong. (or block this user/ip)

share|improve this answer
    
can we track from which ip which user is connected and what he has done ? –  kapil das Feb 26 at 15:22

Just setup audit log forwarding.

share|improve this answer

Linux comes with the auditd system. It allows the monitoring of what you require. Look at this question.

And like iscsi said, you could set up log forwarding to your central server.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.