View the last logged-on user information in CentOS

We know that in redhat, you can use lastlog to view the last logon information of each user, and use last to view the logon information of the specified user.

View user login information:

Last

Command details
Function Description: lists information related to users who have logged on to the system in the past.

Syntax: last [-adRx] [-f <Record File>] [-n <display Number of columns>] [account name...] [terminal number...]

Note: Execute the last command separately. It will read the file named wtmp in the/var/log directory, and display all the usernames of the login system recorded in the file.
Parameters:
-A displays the host name or IP address from which to log on to the system in the last line.

-D. Convert the IP address to the host name.

-F <Record File> specifies the record file.

-N <display columns> or-<display columns> sets the number of columns displayed in the list.

-R does not display the host name or IP address used to log on to the system.

-X displays information such as system shutdown, reboot, and change of execution level.

Lastlog

Only record the Last login time of each user,/var/log/lastlog

For example, check whether the root and admin have logged on in the last 20 days:
# Lastlog-t 20 | egrep "root | admin"

View the logged-on users in the last 20 days, except root and admin:
# Lastlog-t 20 | egrep-v "root | admin"