{"componentChunkName":"component---src-templates-post-template-jsx","path":"/history/posts/2022-11-24--001","result":{"data":{"site":{"siteMetadata":{"title":"Blog by Eunyoung","subtitle":"작업 기록 블로그","copyright":"© All rights reserved.","author":{"name":"EunYoung","twitter":"#"},"disqusShortname":"","url":"https://ssongey.github.io"}},"markdownRemark":{"id":"ad8c64b1-d08d-5451-a38f-c0fe329f1c3b","html":"<p><strong>목차</strong></p>\n<p>이번에 업무 관련 검증을 받게 되면서 서버의 접속 로그를 신경쓸일이 생겼다.<br>\n접속로그는 /var/log/wtmp 에 기록이 된다고 하는데, tail, vi 등으로는 볼 수가 없었고, 찾아보니 last 명령어를 사용해야한다고 한다.</p>\n<h2>✔️ 리눅스 접속 로그 확인</h2>\n<ul>\n<li>last 명령어를 사용한다.</li>\n<li>해당 명령어를 이용하여 /var/log/wtmp 에 기록된 내용을 보여준다.</li>\n</ul>\n<div class=\"gatsby-highlight\" data-language=\"bash\"><pre class=\"language-bash\"><code class=\"language-bash\">$ last</code></pre></div>\n<p>\n  <a\n    class=\"gatsby-resp-image-link\"\n    href=\"/devHistoryBlog/static/5a840be9e975736fdc54fbeb82ad4fbf/133ae/001.png\"\n    style=\"display: block\"\n    target=\"_blank\"\n    rel=\"noopener\"\n  >\n  \n  <span\n    class=\"gatsby-resp-image-wrapper\"\n    style=\"position: relative; display: block;  max-width: 960px; margin-left: auto; margin-right: auto;\"\n  >\n    <span\n      class=\"gatsby-resp-image-background-image\"\n      style=\"padding-bottom: 24.166666666666664%; position: relative; bottom: 0; left: 0; background-image: url('data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABQAAAAFCAYAAABFA8wzAAAACXBIWXMAABYlAAAWJQFJUiTwAAAAxUlEQVQY042Q2Q6DIBBFEXdRFBeqxhjU///G295JaF/7MIFZ7plF2dnCOIPRT0iLFHlRYBxH9H2PaZpQliWaphGf5r1HXdcSM8ZgXVc456C1hlIKyg0Opv4k/EsCTBA0zzOO4xAxQRQSdp6n+MuyCOi6Luz7/gOyiIlwBehUI89zKSDseR6Zgv5939i2TYCxWYyHEH5ATkBI27YSSJLku461FlmWoes6aRqnZZ5/agjniagTIB0Wc81hGFBVlbzxhrHRv/YGSZhzclzKw1AAAAAASUVORK5CYII='); background-size: cover; display: block;\"\n    >\n      <img\n        class=\"gatsby-resp-image-image\"\n        style=\"width: 100%; height: 100%; margin: 0; vertical-align: middle; position: absolute; top: 0; left: 0; box-shadow: inset 0px 0px 0px 400px white;\"\n        alt=\"001\"\n        title=\"\"\n        src=\"/devHistoryBlog/static/5a840be9e975736fdc54fbeb82ad4fbf/d9199/001.png\"\n        srcset=\"/devHistoryBlog/static/5a840be9e975736fdc54fbeb82ad4fbf/8ff5a/001.png 240w,\n/devHistoryBlog/static/5a840be9e975736fdc54fbeb82ad4fbf/e85cb/001.png 480w,\n/devHistoryBlog/static/5a840be9e975736fdc54fbeb82ad4fbf/d9199/001.png 960w,\n/devHistoryBlog/static/5a840be9e975736fdc54fbeb82ad4fbf/133ae/001.png 1424w\"\n        sizes=\"(max-width: 960px) 100vw, 960px\"\n      />\n    </span>\n  </span>\n  \n  </a>\n    </p>\n<br/>\n<h2>✔️ 특정 계정 접속 확인</h2>\n<div class=\"gatsby-highlight\" data-language=\"bash\"><pre class=\"language-bash\"><code class=\"language-bash\">$ last root</code></pre></div>\n<br/>\n<h2>✔️ 특정 시간 이전 접속 확인</h2>\n<div class=\"gatsby-highlight\" data-language=\"bash\"><pre class=\"language-bash\"><code class=\"language-bash\"><span class=\"token comment\"># 시간 포맷: YYYYMMDDHHMMSS</span>\n$ last -t <span class=\"token number\">202211242359</span></code></pre></div>\n<br/>\n<h2>✔️ 연도 정보 같이 확인</h2>\n<div class=\"gatsby-highlight\" data-language=\"bash\"><pre class=\"language-bash\"><code class=\"language-bash\">$ last -F</code></pre></div>\n<br/>\n<h2>✔️ 이번달 기록만 나올 경우</h2>\n<ul>\n<li>/var/log/wtmp 파일이 logrotate에 의해 순환될 경우 이번달만 나올 수 있다.</li>\n<li>과거 기록을 보려면 rotate 된 파일을 지정해주면 된다.</li>\n</ul>\n<div class=\"gatsby-highlight\" data-language=\"bash\"><pre class=\"language-bash\"><code class=\"language-bash\">$ last -f /var/log/wtmp.1</code></pre></div>\n<br/>\n<br/>\n<p>참고)<br>\n<a href=\"https://zetawiki.com/wiki/%EB%A6%AC%EB%88%85%EC%8A%A4_%EC%A0%91%EC%86%8D%EA%B8%B0%EB%A1%9D_%ED%99%95%EC%9D%B8_last\">리눅스 접속기록 확인 last</a></p>","fields":{"tagSlugs":["/tags/linux/"],"slug":"/history/posts/2022-11-24--001"},"frontmatter":{"title":"리눅스 접속 로그 확인 명령어","tags":["linux"],"date":"2022-11-24","description":""}}},"pageContext":{"slug":"/history/posts/2022-11-24--001"}},"staticQueryHashes":[]}