Auditing User's actions

Some threads worth reading:

tracing a user's session
Unix - Logs
Hpux C2 Auditing