1,linux操作日志记录,记录从各个ip登陆到系统的账号,指向命令及命令执行时间
#!/bin/bash
echo "export PROMPT_COMMAND='{ msg=\$(history 1 | { read x y; echo \$y; }); logger -p local5.info \"\$HOSTNAME [HIST] : \$SSH_CLIENT : \$PWD : \$msg\"; }'" >> /etc/bashrc
echo export HISTTIMEFORMAT=\"[%F %T]\" >> /etc/bashrc
echo \# Save user log >> /etc/rsyslog.conf
echo local5.* /var/log/hist.log >> /etc/rsyslog.conf
service rsyslog restart
