The Linux log /var/log/wtmp
according to the man page http://linux.die.net/man/5/wtmp stores "utmp" events for many system events, like logging into it (LOGIN_PROCESS ut_type
), changing runlevel (RUN_LVL ut_type
) and other.
There is last
utility, which parses wtmp and prints who was logged into the system, and when it was rebooted.
Is there tool to display other records from wtmp
log?
What is the process which writes info into wtmp
log?