last命令
-
功能说明：显示最近登录用户的列表
last命令会读取位于/var/log/下的wtmp文件，并把文件中记录的登录系统的用户名显示出来。
-
用法：last
选项 作用 -n 设置显示名单的行数 -R 不显示登录的主机名称和IP地址 示例：显示最近登录用户的信息
root pts/1 192.168.3.98 Mon May 25 18:57 still logged in root pts/0 192.168.3.98 Mon May 25 17:21 - 21:01 (03:40) root pts/0 192.168.3.98 Mon May 25 15:44 - 17:21 (01:36) root tty1 Mon May 25 15:44 still logged in reboot system boot 3.10.0-957.el7.x Mon May 25 23:44 - 22:50 (00:-53) root pts/1 192.168.3.98 Tue Jan 22 23:33 - crash (24961+00:11 root pts/0 192.168.3.98 Tue Jan 22 22:57 - crash (24961+00:46 root pts/2 192.168.3.98 Tue Jan 22 17:34 - 19:55 (02:20) root pts/0 192.168.3.98 Wed Feb 21 00:13 - 19:43 (-24136+-4:- root tty6 Wed Feb 21 00:12 - 23:33 (-24136+00:- root pts/1 192.168.3.98 Mon May 11 11:17 - 19:13 (-24946+-16: root pts/0 192.168.3.98 Sun May 10 10:06 - 12:33 (1+02:26) root tty5 Sun May 10 09:52 - 23:33 (-24945+-10: root tty4 Sun May 10 09:52 - 23:33 (-24945+-10: root tty3 Sun May 10 09:52 - 23:33 (-24945+-10: root tty2 Sun May 10 09:52 - 23:33 (-24945+-10: root tty6 Sun May 10 09:51 - 11:16 (1+01:25) root pts/0 192.168.3.98 Sun May 10 08:42 - 10:06 (01:24) root tty1 Sun May 10 08:41 - 23:33 (-24945+-9:- reboot system boot 3.10.0-957.el7.x Sun May 10 08:36 - 22:50 (15+14:13)示例2：显示最近登录系统的5位用户
[root@node1 ~]# last -n 5 root pts/1 192.168.3.98 Mon May 25 18:57 still logged in root pts/0 192.168.3.98 Mon May 25 17:21 - 21:01 (03:40) root pts/0 192.168.3.98 Mon May 25 15:44 - 17:21 (01:36) root tty1 Mon May 25 15:44 still logged in reboot system boot 3.10.0-957.el7.x Mon May 25 23:44 - 22:52 (00:-51)