Users logs

IBCMED

Dabbler
Joined
May 18, 2022
Messages
33
How do I see user logs? Know who logged in and when logged in, deleted themselves and what deleted and etc... ?
 

sretalla

Powered by Neutrality
Moderator
Joined
Jan 1, 2016
Messages
9,702
/var/log/userlog has the user creation, etc. events.

/var/log/utx.log seems to contain logins, but I've not quickly found the interpreter to make that nicer to look at... maybe other tools exist, but apparently lastlogin will get the last login from each user out of that file, ac -p -d will list the amount of time logged in.
 

IBCMED

Dabbler
Joined
May 18, 2022
Messages
33
The "utx" directory does not exist. About "lastlogin", I was able to see the last login I made, but how do I see the other users on the system?
 

Patrick M. Hausen

Hall of Famer
Joined
Nov 25, 2013
Messages
7,740
Are you talking about file sharing users? You would need to adapt your Samba configuration to log these, I guess.
 

IBCMED

Dabbler
Joined
May 18, 2022
Messages
33
So, users using the file system, can I see what they do inside TrueNAS? I used WD's MyCloud and users deleted files and I didn't know who and when, I would like to know if TrueNAS does it and if so, how.
 

sretalla

Powered by Neutrality
Moderator
Joined
Jan 1, 2016
Messages
9,702
Search in this forum for vfs full_audit, which is what you'll need to configure if you want that data to be saved... then you'll probably want to use something like graylog or another product to sift through the logs (which you would re-direct to go to the graylog or other syslog server in the settings of TrueNAS)
 
Top