Linux常用命令-lastlog

命令

lastlog

描述

reports the most recent login of all users or of a given user
显示用户最后一次登录记录

用法

1
lastlog [options]

选项

1
2
3
4
5
6
7
Options:
-b, --before DAYS 显示指定天数之前的lastlog记录
-C, --clear 删除指定用户的lastlog记录,只能配合-u使用
-R, --root CHROOT_DIR 指定根目录
-S, --set 将lastlog记录设置为当前时间,只能配合-u使用
-t, --time DAYS 显示最近几天的lastlog记录
-u, --user LOGIN 显示指定用户的lastlog记录

注意

lastlog命令默认读取的是/var/log/lastlog

示例

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
# 如果用户从未登录过系统,则显示为**Never logged in**
$ lastlog
Username Port From Latest
root pts/1 192.168.80.1 Sun Feb 28 10:11:13 +0800 2021
bin **Never logged in**
shutdown **Never logged in**
halt **Never logged in**
mail pts/0 Tue Feb 23 16:37:00 +0800 2021
nobody **Never logged in**
sshd **Never logged in**
app pts/0 Mon Feb 22 11:52:39 +0800 2021
userb pts/0 Wed Feb 24 18:17:06 +0800 2021
usera pts/1 Fri Feb 26 16:34:09 +0800 2021
# -b5显示5天以前的登录记录
$ lastlog -b 5
Username Port From Latest
bin **Never logged in**
shutdown **Never logged in**
halt **Never logged in**
nobody **Never logged in**
sshd **Never logged in**
app pts/0 Mon Feb 22 11:52:39 +0800 2021
# -t5显示5天以内的登录记录
$ lastlog -t 5
Username Port From Latest
root pts/1 192.168.80.1 Sun Feb 28 10:11:13 +0800 2021
mail pts/0 Tue Feb 23 16:37:00 +0800 2021
userb pts/0 Wed Feb 24 18:17:06 +0800 2021
usera pts/1 Fri Feb 26 16:34:09 +0800 2021
# -u指定用户
$ lastlog -u usera
Username Port From Latest
usera pts/1 Fri Feb 26 16:34:09 +0800 2021
# -S更改指定用户的登录记录
$ lastlog -u usera -S
$ lastlog -u usera
Username Port From Latest
usera lastlog localhost Sun Feb 28 11:31:05 +0800 2021
# -C删除指定用户的登录记录
$ lastlog -u usera -C
$ lastlog -u usera
Username Port From Latest
usera **Never logged in**