The psacct package implements the process accounting service in
addition to the following utilities that you can use to monitor process activities:
- ac
Displays connection times in hours for a user as recorded in the
wtmpfile (by default,/var/log/wtmp).- accton
Turns on process accounting to the specified file. If you do not specify a file name argument, process accounting is stopped. The default system accounting file is
/var/account/pacct.- lastcomm
Displays information about previously executed commands as recorded in the system accounting file.
- sa
Summarizes information about previously executed commands as recorded in the system accounting file.
As for any logging activity, ensure that the file system has enough space to store the
system accounting and wtmp files. Monitor the size of the files and, if
necessary, truncate them.
For more information, see the ac(1), accton(8),
lastcomm(1), and sa(8) manual pages.