Comments on: Linux last reboot time and date find out

By: alexander

alexander — Thu, 17 Nov 2011 20:47:11 +0000

last | grep USERNAME | grep tty | head -n 1 |awk -F ‘ ‘ ‘{print $7}’

By: lavermil

lavermil — Mon, 13 Jun 2011 21:02:34 +0000

The uptime idea from Sam is nice but really that just returns the uptime (same as the uptime command) in date format.

By: Sam Hocevar

Sam Hocevar — Mon, 28 Mar 2011 14:34:28 +0000

wtmp is rotated by the system, so the last solution will stop working. I believe the most reliable solution is:

date -d "`cut -f1 -d. /proc/uptime` seconds ago"

By: Nick

Nick — Wed, 16 Mar 2011 23:48:20 +0000

In order to track who rebooted a linux machine, I would:
- disable root logins; many users sharing root is bad
- create a list of sudoers, so only people listed there could shutdown / reboot / halt
- /var/log/messages would contain traces of who ran sudo shutdown -r now or such

By: L_kernel

L_kernel — Thu, 23 Sep 2010 13:38:12 +0000

Thanks a lot!
I help me!

By: Ajeet

Ajeet — Tue, 17 Aug 2010 10:12:32 +0000

Can we find who rebooted the linux box?

By: xera

xera — Sun, 06 Dec 2009 15:04:29 +0000

the command “last reboot” worked for me, on my mac!

By: diana

diana — Tue, 16 Oct 2007 03:45:12 +0000

Thanks vivek.its working great…..

By: vivek

vivek — Mon, 15 Oct 2007 14:12:12 +0000

My bad...I forgot to include double quote ...

59 11 * * * last | grep "$(date '+%a %b %d')" > /tmp/users.out ; mail -s “Users Logged"

Also you may wanna try out:

last -t yyyymmddhhmmss

HTH

By: diana

diana — Mon, 15 Oct 2007 13:25:16 +0000

thanks a lot vivek.i din’t expect this much fast reply.But unfortunately when i execute,
$ last | grep $(date ‘+%a %b %d’)
i couldn’t get anything.Please help

By: vivek

vivek — Mon, 15 Oct 2007 13:06:26 +0000

Should be..

59 11 * * * last | grep $(date '+%a %b %d') > /tmp/users.out ; mail -s “Users Logged"

By: diana

diana — Mon, 15 Oct 2007 12:57:13 +0000

i couldn’t find out the error. please help me.

#Send list of users logged on to server via email
59 11 * * * last | grep date ‘+%a %b %d’ > /tmp/users.out ; mail -s “Users Logged Today” ephrondiana@gmail.com

when i tried to execute,
$ last |grep date ‘+%a %b %d’
i got no such file or directory error.

By: jamshid

jamshid — Thu, 22 Feb 2007 11:29:59 +0000

On my FC5 system instead of
last reboot | head -1
I can type
last reboot -1