Q. How do I Monitor Linux User Activity in real time?

A. The whowatch program scans the most current common log file of Linux server and creates the following statistics in real time:

=> The users currently logged on to the machine, in real-time.
=> User login name,
=> User tty
=> User host name
=> User’s process
=> The type of the connection (ie. telnet or ssh)
=> Display of users command line can be switch to tty idle time.
=> Certain user can be selected and his processes tree may be viewed as well as tree of all system processes.
=> Kill user process etc

I have already written how to install and configure whowatch. Please refer this previous article.