Unix‎ > ‎Solaris‎ > ‎Solaris man pages‎ > ‎1‎ > ‎


     lastcomm - display the last commands  executed,  in  reverse

     lastcomm [-f file] [-x] [command-name] ...  [user-name]  ...
     [terminal-name] ...

     The lastcomm command gives information  on  previously  exe-
     cuted commands. lastcomm with no arguments displays informa-
     tion about all the  commands  recorded  during  the  current
     accounting   file's  lifetime.  If  called  with  arguments,
     lastcomm only displays accounting entries  with  a  matching
     command-name,  user-name, or terminal-name. If extended pro-
     cess accounting is active (see acctadm(1M)) and is recording
     the  appropriate  data items, lastcomm attempts to take data
     from the current extended process accounting file. If  stan-
     dard  process accounting is active, lastcomm takes data from
     the current standard accounting file (see acct(2)).

     If terminal-name is `- -', there was no controlling TTY  for
     the  process.  The process was probably executed during boot
     time. If  terminal-name is `??', the controlling  TTY  could
     not be decoded into a printable name.

     For each process  entry,  lastcomm  displays  the  following
     items of information:

       o  The command name under which the process was called.

       o  One or more flags indicating special information  about
          the process. The flags have the following meanings:

          F        The process performed a fork but not an exec.

          S        The process ran as a set-user-id program.

       o  The name of the user who ran the process.

       o  The terminal which the user was logged  in  on  at  the
          time (if applicable).

       o  The  amount  of  CPU  time  used  by  the  process  (in

          The date and time the process exited.

     The following options are supported:

     -f file         Uses file as the source of accounting  data.
                     file  may  be  either  an  extended  process
                     accounting  file  or  a   standard   process
                     accounting file.

     -x              Uses the currently active  extended  process
                     accounting   file.  If  extended  processing
                     accounting is inactive, no  output  will  be

     Example 1: Listing executions of named commands

     The command

     example% lastcomm a.out root term/01

     produces a listing of all the executions of  commands  named
     a.out by user root while using the terminal term/01.

     Example 2: Listing all user commands

     The command

     example% lastcomm root

     produces a listing of all  the  commands  executed  by  user

     /var/adm/pacct                  standard accounting file

     /var/adm/exacct/proc            extended accounting file

     See attributes(5) for descriptions of the  following  attri-

    |       ATTRIBUTE TYPE        |       ATTRIBUTE VALUE       |
    | Availability                | SUNWesu                     |

     last(1), acctadm(1M), acct(2), acct.h(3HEAD),  sigvec(3UCB),
     core(4), attributes(5)

Man pages from Solaris 10 Update 8. See docs.sun.com and www.oracle.com for further documentation and Solaris information.