Audit log of processes

Question

I was wondering if there is a way that I can check to see the times a certain process ran. I'm running RedHat.

Thanks.

As in a cron or the length/since when a process is being run? — Arenstar, Nov 09 '10 at 22:47
@Dennis, the server admins unnecessarily have x11 and Symantec installed on a webserver. We've had issues with the scanner causing unnecessary server load. — Tres, Nov 11 '10 at 04:55

RedGrittyBrick · Answer 1 · 2010-11-09T23:06:04.550

2

edited Nov 09 '10 at 23:06

answered Nov 09 '10 at 23:01

RedGrittyBrick

score 1 · Accepted Answer · answered Nov 09 '10 at 22:32

1

Well, depending on whether or not your mystery process was configured to use syslog, you could check /var/log/messages.

answered Nov 09 '10 at 22:32

EEAA

score 1 · Answer 3 · answered Nov 10 '10 at 02:50

1

Look for lastcomm and auditd, but they're only good if you had them installed first.

answered Nov 10 '10 at 02:50

Slartibartfast

3 Answers3