Process accounting on Linux captures all process activities by all users on a system. It allows a system administrator to audit what was executed, the amount of CPU time and memory the process used, and the date and time of when the process was executed.
Process accounting command cheat sheet:
|accton||Turns on process accounting|
|ac||Displays statistics about how a user has logged on|
|lastcomm||Displays the last commands that was executed|
|sa||Summarizes information on previous executed commands|
Installation[edit | edit source]
Red Hat based systems get the process accounting binaries from the psacct package.
# dnf install psacct
psacct.service systemd service needs to then be enabled and started.
# systemctl enable psacct # systemctl start psacct
See Also[edit | edit source]