• Software

  • [Linux] Retrieve Logs after using History -c

Greetings,

If someone used "history -c" as root, is there a possible way to retrieve the history of commands used even after clearing the history, there should be a file that saves all the logs. [OS is Red Hat]

Regards.
`history` will usually save the commands in a file in the user's home directory. They're usually hidden files (names start with a dot).

Try to check in a user's home dir for a file named:
  • .history
  • .bash_history
  • .*history
rahmu wrote`history` will usually save the commands in a file in the user's home directory. They're usually hidden files (names start with a dot).

Try to check in a user's home dir for a file named:
  • .history
  • .bash_history
  • .*history
Neither files are found, i'm accessing via ftp to the server and all hidden files are visible. So i'm sure these are not found.

Any other way ?
Not that I know of.

Keep in mind that this should only keep a list of the commands you entered in your shell. So it's useful to remember certain commands or certain arguments of the commands. But if you want to investigate what happens in your system there are other log files.

Virtually every command that modified something on your computer will be logged in a file in /var/log/*.