Is there a way to find a log of all the commands that have been run by a user on Ubuntu 11.10 Server? I need to find out what my friend ran to install a program.
Follow these instructions (revised from this answer).
Append the below line the end of that file
export PROMPT_COMMAND='RETRN_VAL=$?;logger -p local6.debug "$(whoami) [$$]: $(history 1 | sed "s/[ ][0-9]+[ ]//" ) [$RETRN_VAL]"'
Create a new file
Add the line to the file
Add line to the file
/var/log/mail.warn /var/log/mail.err [...] /var/log/message
Restart the rsyslog.
sudo service rsyslog restart