hi!
How can I find into:
/var/log/messages.4
/var/log/messages.3
/var/log/messages.2
/var/log/messages.1
/var/log/messages
The last user do a login? (for example user1)
My idea is to search by the pattern "Accepted password for" buy I necessary search into all files first and in the second get the last date.
Anybody help me?
No, use this command:
last -n 1
last
by itself dumps all logins in reverse date order -- newest to oldest.
last isn't a good solution for me because the users connect by ftp.
I only see the information into messages logs.
With AWK and an array isn't possible to get all information and then extract the last logging for any user?