how to capture the full command root logs from graylog server : for example when we run command with root login " lsmod | grep -i usb" - it is not showing logs with full command. showing lsmod only

Can you give some more detail on what and how you are pulling those logs? Are you talking about .bash_history? Are you using filebeat or nxlog to retrieve those? What OS are you using? CentOS, Ubuntu, FreeBSD? ** I moved your question to Graylog Central, where questions are asked… :smiley:

Hi The OS is CentOS 7.9 and using rsyslod for collecting logs from server. When I run any command like lsmod | grep -i usb —> it is not showing in graysys log events that I executed total command ( lsmod | grep -i usb) … It shows only lsmod

Hey @bhagyaiah [image] bhagyaiah: When I run any command like lsmod | grep -i usb —> it is not showing in graysys log events that I executed total command ( lsmod | grep -i usb) … It shows only lsmod Not sure what you trying to do. Could you answer @tmacgbay questions?

How to capture the full command root logs from graylog server

Graylog Central (peer support)

tmacgbay (Tmacgbay) January 4, 2023, 2:03am 5

Your environment and what you are doing is a complete black box… you need to provide more information for us to help you. Here are some posts on how to give more details:

Topic		Replies	Views
History command line to graylog Graylog Central (peer support)	2	661	December 19, 2023
Graylog log analizy Active directory Graylog Central (peer support)	1	986	July 26, 2022
Tailing Graylog from the command-line Graylog Central (peer support)	1	485	June 3, 2019
List of log samples that might be helpful Graylog Central (peer support)	0	476	April 11, 2017
New to Graylog how to show the Server One log Graylog Central (peer support)	6	1264	January 16, 2018

How to capture the full command root logs from graylog server

Related topics