The tag has no usage guidance.

learn more… | top users | synonyms

0
votes
1answer
15 views

Linux last login get the logins yesterday and email it the next day or specific time via crontab

I need to know the last login yesterday and email it to me via crontab.... Since the last command shows all the login you need to scroll up. Using grep and cut might do the trick.
0
votes
0answers
75 views

why is cron flooding wtmp and last?

When I type the last command, I see a bunch of entries in there for cron. Every single cron job that gets run creates an entry and it's flooding wtmp with unnecessary entries. Any ideas how I can stop ...
0
votes
1answer
42 views

Viewing older entries for lastb on linux

I have a server (Amazon Linux) that has been up for 261 days: [server]$ uptime 16:29:46 up 261 days, 4:47, 1 user, load average: 0.05, 0.16, 0.18 I am trying to find out if there have been any ...
0
votes
1answer
142 views

Parse different lastlog[s]

I have the lastlog from 100 machines that I need to parse. Since I have them all centrally located, is there a way to parse these? Or do I need to go back to each machine and type the "lastlog" ...
-1
votes
1answer
278 views

last command fails - how to fix it so that it works again?

The server is Ubuntu 11.10. When I issue the "last" command from the command line, it gives the following output: # last last: read failed! wtmp begins Fri Apr 18 15:47:48 2014 This I suspect is ...
2
votes
0answers
771 views

unknown user in last output

I found a lot of lines (~900) similar to these in the last output of one of my hosts: trustpor ftpd31576 www.trustport.co Tue Oct 1 10:03 - 10:03 (00:00) trustpor ftpd31575 www.trustport.co ...
0
votes
2answers
62 views

Copy latest created directory

I would like to make a second backup from the latest created backup. So I tried the shell command: last='ls -tr | tail -1' cp -r /path/.../"$last" /path/.../backup/ but it copies a randome backup. ...
0
votes
1answer
121 views

Last command - very strange output

When trying to execute "last" command I am getting my last logins mixed with the content from files that exists on that server. for instance: <tbody tr>=0A </ <tr>=0A ...
2
votes
1answer
272 views

“last” command indicates someone logged in for 00:00 - was our server compromised?

I noticed the following weird entry from my "last" command from an IP address in Romania: user pts/0 89.123.111.228 Sat Jul 28 12:48 - 12:48 (00:00) I'm wondering if that means I was ...
2
votes
2answers
4k views

Getting login year data with the 'last' command on linux

On Solaris, there the command 'fwtmp' provide the year information from the wtmp logs. For example: host # /usr/lib/acct/fwtmp < /var/adm/wtmpx > tmp_wtmpx_file host # head -1 tmp_wtmpx_file ...