Can the Windows app monitor user activities with in Linux environments and the commands that they used ??

[allamiro]

Can you guys or this app monitor user activities with in Linux environments and the commands that they used ??

[araitz · Accepted solution]

That app doesn't do this explicitly, but you might get some user activities and commands through the top/ps/prstat inputs.

If Splunk is running as root and a modern shell like BASH is in use, it is possible to monitor each user's history file in their home directory to keep a record of what commands each user ran.

I will mark that down as an enhancement request for the next version of the app - tracking it as SPL-46559.