As a root user i switch to a different user say "oratest". I would like to know the details like at what time did the switch ( su - oratest ) happen.
Are there any logs to check this
Thanks.
Using the sulog or auth.log file you can get to know. This will log the information about the su.
Depending upon the file system it's locations may vary.
Example: /var/log/auth.log
Where is this file located?
---------- Post updated at 04:48 PM ---------- Previous update was at 04:44 PM ----------
Thanks selvan..i found the file sulog at /var/adm..
Thanks again...
Have you got the location now? I have mentioned the file path as per my file system structure
U can locate the file sulog in /var/adm path.