How to identify the scripts ran at a particular day of last month?
I have to identify a script that ran on 06/01/2011 @ 4 am
There is no direct way to get this information - you have to backdoor it.
Plus, you cannot know unless one of these is true:
-
you can match a logfile with a script and then use the logfile filetime to get an idea of when the script ran
-
You have crontab entries for your scripts. Each crontab entry runs at a specified time.
-
you have scheduling software like AppWorx, etc. These types of packages have good history information
If some random user ran a script adhoc, and there are no logs, then you have a BIG problem.
Another solution would be process accounting.
you can try to use find
Maybe you ran the script 24 hours ago use this option
find -mtime 1 -name scriptname
I am not very clear but it can done using mtime option.