Linux系统last命令详解

在Linux系统中last命令的主要功能就是列出目前与过去登入系统的用户相关信息，使用权限为所有使用者，下面良许教程网为大家详细讲解一下Linux系统中last命令的使用方法。

语法

 shell>> last [options]

参数说明：

• -R 省略 hostname 的栏位

• -num 展示前 num 个

• username 展示 username 的登入讯息

• tty 限制登入讯息包含终端机代号

案例演示

1：查看last命令的帮助信息

 [root@DB-Server ~]# man last
 
 
 
 [root@DB-Server ~]# last -h
 last: invalid option -- h
 Usage: last [-num | -n num] [-f file] [-t YYYYMMDDHHMMSS] [-R] [-x] [-o] [-w] [username..] [tty..]

2：显示最后登录系统的N条记录

 [root@DB-Server ~]#last -10
 root pts/1 :0.0 Wed Dec 18 09:54 still logged in
 root pts/4 :0.0 Wed Dec 18 09:43 - 09:48 (00:04)
 root pts/1 :0.0 Wed Dec 18 09:43 - 09:48 (00:05)
 root pts/3 192.168.103.79 Wed Dec 18 09:41 - 12:40 (02:59)
 root pts/4 :0.0 Wed Dec 18 09:28 - 09:30 (00:01)
 root pts/3 :0.0 Wed Dec 18 09:27 - 09:30 (00:02)
 root pts/2 192.168.103.29 Wed Dec 18 09:27 still logged in
 root pts/1 :0.0 Wed Dec 18 09:27 - 09:42 (00:15)
 root pts/2 :0.0 Wed Dec 18 09:23 - 09:25 (00:01)
 root pts/1 :0.0 Wed Dec 18 09:22 - 09:25 (00:02)
 
 wtmp begins Wed Dec 11 03:02:17 2013
 
 [root@DB-Server ~]# last -n 10
 root pts/1 :0.0 Wed Dec 18 09:54 still logged in
 root pts/4 :0.0 Wed Dec 18 09:43 - 09:48 (00:04)
 root pts/1 :0.0 Wed Dec 18 09:43 - 09:48 (00:05)
 root pts/3 192.168.103.79 Wed Dec 18 09:41 - 12:40 (02:59)
 root pts/4 :0.0 Wed Dec 18 09:28 - 09:30 (00:01)
 root pts/3 :0.0 Wed Dec 18 09:27 - 09:30 (00:02)
 root pts/2 192.168.103.29 Wed Dec 18 09:27 still logged in
 root pts/1 :0.0 Wed Dec 18 09:27 - 09:42 (00:15)
 root pts/2 :0.0 Wed Dec 18 09:23 - 09:25 (00:01)
 root pts/1 :0.0 Wed Dec 18 09:22 - 09:25 (00:02)
 
 wtmp begins Wed Dec 11 03:02:17 2013

显示详细信息

3：将登录系统的主机名或IP地址显示在最后一行

 [root@DB-Server ~]# last -10 -a
 root pts/1 Wed Dec 18 09:54 still logged in :0.0
 root pts/4 Wed Dec 18 09:43 - 09:48 (00:04) :0.0
 root pts/1 Wed Dec 18 09:43 - 09:48 (00:05) :0.0
 root pts/3 Wed Dec 18 09:41 - 12:40 (02:59) 192.168.103.79
 root pts/4 Wed Dec 18 09:28 - 09:30 (00:01) :0.0
 root pts/3 Wed Dec 18 09:27 - 09:30 (00:02) :0.0
 root pts/2 Wed Dec 18 09:27 still logged in 192.168.103.29
 root pts/1 Wed Dec 18 09:27 - 09:42 (00:15) :0.0
 root pts/2 Wed Dec 18 09:23 - 09:25 (00:01) :0.0
 root pts/1 Wed Dec 18 09:22 - 09:25 (00:02) :0.0
 
 wtmp begins Wed Dec 11 03:02:17 2013

显示详细信息

4：不显示登入系统的主机名称或IP地址

 [root@DB-Server ~]# last -10 -R
 root pts/1 Wed Dec 18 09:54 still logged in
 root pts/4 Wed Dec 18 09:43 - 09:48 (00:04)
 root pts/1 Wed Dec 18 09:43 - 09:48 (00:05)
 root pts/3 Wed Dec 18 09:41 - 12:40 (02:59)
 root pts/4 Wed Dec 18 09:28 - 09:30 (00:01)
 root pts/3 Wed Dec 18 09:27 - 09:30 (00:02)
 root pts/2 Wed Dec 18 09:27 still logged in
 root pts/1 Wed Dec 18 09:27 - 09:42 (00:15)
 root pts/2 Wed Dec 18 09:23 - 09:25 (00:01)
 root pts/1 Wed Dec 18 09:22 - 09:25 (00:02)
 
 wtmp begins Wed Dec 11 03:02:17 2013

显示详细信息

5: 指定/var/log/btmp文件，查看登录系统的用户相关信息

 [root@DB-Server ~]# last -n 10 -f /var/log/btmp
 root ssh:notty 192.168.136.163 Fri Oct 17 18:16 gone - no logout
 root ssh:notty 192.168.136.163 Fri Oct 17 09:50 - 18:16 (08:26)
 root ssh:notty 192.168.136.163 Fri Oct 17 09:50 - 09:50 (00:00)
 root ssh:notty 192.168.40.218 Tue Jul 23 17:40 - 09:50 (450+16:10)
 root ssh:notty 192.168.236.149 Sun Apr 14 01:34 - 17:40 (100+16:05)
 root ssh:notty 192.168.178.147 Fri Mar 8 17:25 - 01:34 (36+08:08)
 tomcat ssh:notty get185806.gfg1.e Fri Oct 26 16:48 - 17:25 (133+00:37)
 root ssh:notty 192.168.193.3 Mon Oct 22 18:13 - 16:48 (3+22:34)
 root ssh:notty 192.168.193.3 Mon Oct 22 18:13 - 18:13 (00:00)
 devloper ssh:notty get185819.gfg1.e Wed Oct 17 17:22 - 18:13 (5+00:50)
 
 btmp begins Thu Apr 12 14:30:06 2012

显示详细信息

6: 将IP地址转换成主机名称

 last -10 -d

7: 显示YYYYMMDDHHMMSS（20150110093000）之前的信息

 [root@DB-Server ~]# last -10 -t 20150110093000
 root pts/2 192.168.102.186 Fri Jan 9 15:35 - 17:27 (01:52)
 root pts/2 192.168.102.134 Thu Jan 8 10:25 - 12:27 (02:02)
 root pts/3 192.168.125.53 Tue Jan 6 23:59 - 00:09 (00:09)
 root pts/2 192.168.125.53 Tue Jan 6 23:45 - 00:09 (00:23)
 root pts/3 192.168.102.88 Tue Jan 6 15:23 - 16:20 (00:57)
 root pts/2 192.168.102.88 Tue Jan 6 15:08 - 17:25 (02:16)
 oracle pts/1 :2.0 Tue Jan 6 15:07 still logged in
 reboot system boot 2.6.32-200.13.1. Tue Jan 6 15:07 (7+20:21)
 root pts/2 192.168.102.88 Tue Jan 6 14:47 - down (00:17)
 oracle pts/1 :2.0 Tue Jan 6 14:46 - down (00:18)
 
 wtmp begins Wed Apr 11 16:31:10 2012

总结

至此关于Linux系统中last命令的使用方法分享结束，大家如果对命令的使用方法还有疑问可以通过评论区将问题提交给我们。

以上就是良许教程网为各位朋友分享的Linux系统相关内容。想要了解更多Linux相关知识记得关注公众号“良许Linux”，或扫描下方二维码进行关注，更多干货等着你！