Common lastlog commands for Linux Server System Log Management

The lastlog file is queried every time a user logs on. You can use the lastlog command to check the last logon time of a specific user and format the last logon log/var/log/lastlog.

It displays the logon name, port number (tty), and last logon time according to the UID sorting. If a user has Never logged on, lastlog displays ** Never logged **. Note that you need to run this command as root, for example:

The Code is as follows:	Copy code
Rong 5 202.38.64.187 Fri Aug 18 15:57:01 + 0800 2000 Dbb ** Never logged in ** Xinchen ** Never logged in ** Pb9511 ** Never logged in ** Xchen 0 202.38.64.190 Sun Aug 13 10:01:22 + 0800 2000

In addition, you can add some parameters, for example, the "last-u 102" command will report users whose UID is 102; the "last-t 7" command indicates that the report for the previous week is limited