[Klug-general] Auditing SSH login sessions

[Alan at comm-tech]

last -a |grep accountname.

You could use awk to extract columns in the result, and add up login time.
Or  just import output a spreadsheet ;)

On 27/05/11 11:59, Colin McCarthy wrote:
> Hi all, especially server peoples :)
>
> I need to audit SSH sessions against a specific account.   This 
> account is used by a company that is connected to our network via a 
> VPN.  I need to know how many times, when and for how long, they login 
> within a 30 day period.
>
>