history commands

Hi Guys,

I am running RHEL5, I am trying to find out the history of the cammands that were executed on my server.

I have files that are missing I just want to find out what happened to them.

I used history | more but I can't find anything related to my query.

I also checked .bash_history file and I can't find anything there.

Just to add when will the .bash_history file change the timestamp or date on the O/S level?

Please Help !!!!!!!!!!

Thanks in advance...

See if you have /var/log/audit/audit.log. There's a chance that this will have all commands executed on the system.

Normally .bash_history is written to when the interactive shell exits. But there are many many ways to avoid writing to .bash_history.