Hi, In Linux Red Hat 8.0, there is a log file to audit trails: time of log in , user, applcations, program,... Do you know what the name of file is ? Thank you for your instructions. Best

There are a variety of system logs. Look in the /var/log directory. Some log files and some subdirectories for logs are there. The main system log file is /var/log/messages.

in linux all this stuff is logged to a facility called syslog. syslog can be configured to store this stuff anywhere, and split them in various ways, or forward the events to a remote log server. see: /etc/syslog.conf It has been a long time since I have seen a rh system that old, but all those entries should be in /var/log/secure by default. if you just want to see who logged in, that is stored in a wtmp file, which is not written by syslog. To read the entries in wtmp use the command "last" Josh Lange

syslog is voluntary, not all applications use it, so applications that a person runs are generally not logged to files at all. You might want to look at their .bash_history in their home directory if you need to run an audit, but this is easily changable by the user Josh Lange