/var/run/utmp, /var/log/wtmp, /var/log/btmp, and /var/log/lastlog files.who command to view the information of the currently logged-in user in the /var/run/utmp file. The returned result is as follows:

w command to view the username of the currently logged-in user and display the currently executed tasks of the user in the /var/run/utmp file. The returned result is as follows:

users command to view the username of the currently logged-in user in the /var/run/utmp file. The returned result is as follows:

last command to view the information of the currently and historically logged-in users in the /var/log/wtmp file. The returned result is as follows:

lastb command to view the information of all the users who failed to log in to the system in the /var/log/btmp file. The returned result is as follows:

lastlog command to view the last user login information in the /var/log/lastlog file. The returned result is as follows:

cat /var/log/secure command to view the login information. The returned result is as follows:


4648 in <All Event IDs> and click OK.Was this page helpful?
You can also Contact sales or Submit a Ticket for help.
Help us improve! Rate your documentation experience in 5 mins.
Feedback