Score:1

Need to find a high level log if one exists

cn flag

I have an Ubuntu desktop server that is accessed by multiple people remotely. I need to locate a high level log file that shows, at a minimum, the date/time, username, and system action. System action would be log on, log off, files opened by which app, shell commands executed, shell or console errors, script commands executed or errors, etc.. Does this exist for Ubuntu? This is necessary for security but also for troubleshooting.

Score:0
in flag

try

cat /var/log/auth.log
or
last
Score:0
it flag

You can obtain some of the information you want, see man journalctl. Other information can be saved by configuring and enabling "Process Accounting" see (https://www.cyberciti.biz/faq/linux-unix-bsd-varaccountpacct-or-varlogaccountpacct-file/), but beware of producing BIG datafiles. man acct accton sa.

There is also the Audit Daemon (man auditd) which can be configured, Beware of producing BIG datafiles

Your other requests, "... shell commands executed, shell or console errors, script commands executed or errors, etc" show a general misunderstanding of Linux.

You can send the system's logs to an other, more secure system. See man rsyslogd rsyslog.conf.

One really big log file with ALL that data? That's there by default? Nope.

I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.