adm9000-3

Thank you for fast answer. Yes, audit log is writing when i am typing command with '--log-output=off' Another question: is there existing filter to clear output and leave only commands?...

The main idea of all my actions to make 'ssh bastion server' where to users connects first then connects to another servers and all their sessions are writing. But i...

I want to log all user commands does not matter what server the user is currently on, thats why i searching a way to use Tlog or another similar utility....

Trying auditd with standard options: -a exit,always -F arch=b64 -S execve -a exit,always -F arch=b32 -S execve I am logging all commands on the host but when i ssh`ing to...