I'd like to start keeping track of which binaries users run on our Linux cluster. I'd like log the results on each node, and then aggregate them to find the total. I'd like to eventually to get to the point where I can run a report at the end of the month and see that /usr/bin/foo
was run 9000 times.
My question is about the logging aspect. What facility is best to achieve this? process accounting? auditd
?
Specifically I'd like the log to keep track of the path to each executable run, and how often it was executed.