View the last logged-on user information in CentOS

We know that in redhat, you can use lastlog to view the last logon information of each user, and use last to view the logon information of the specified user. View user login information: detailed explanation of last command function description: lists information about users currently logged on to the system. Syntax: last [-adRx] [-f & lt; Record File & gt;] [-n & lt; display columns & gt;] [account name...] [terminal number...] note: Execute The last Command separately and it will read

We know that in redhat, you can use lastlog to view the last logon information of each user, and use last to view the logon information of the specified user.

View user login information:

Last

Command details
Function description: lists information related to users who have logged on to the system in the past.

Syntax: last [-adRx] [-f <记录文件> ] [-N <显示列数> ] [Account name...] [terminal number...]

Note: Execute The last Command separately. it will read the file named wtmp in the/var/log directory, and display all the usernames of the login system recorded in the file.
Parameters:
-A displays the host name or IP address from which to log on to the system in the last line.

-D. convert the IP address to the host name.

-F <记录文件> Specifies the record file.

-N <显示列数> Or- <显示列数> Set the number of columns displayed in the list.

-R does not display the host name or IP address used to log on to the system.

-X displays information such as system shutdown, reboot, and change of execution level.

Lastlog

Only record the last login time of each user,/var/log/lastlog

For example, check whether the root and admin have logged on in the last 20 days:
# Lastlog-t 20 | egrep "root | admin"

View the logged-on users in the last 20 days, except root and admin:
# Lastlog-t 20 | egrep-v "root | admin"