logs of commands that is hit to the servers

Question

my question is if there is any tool that collects logs of all the commands that i have entered after i ssh into that ec2instance.

Accepted Answer

Yes, you can use any tool to collect the logs like Bash history, Auditd (an open source tool that can be used to track system activity and logs all executed commands), Snoopy (an open source tool that logs all the executed commands), Syslog, etc.

Answer

It is not clear if such a tool exists, but the following configuration in "~/.bash_profile" can be used to keep logs.  
```
# keep everything in the log.

P_PROC=`ps aux | grep $PPID | grep sshd | awk ‘{ print $11 }’`

if [ “$P_PROC” = sshd: ]; then

script ~/log/`date +%Y%m%d-%H%M%S.log`

exit

fi
```

After log output, it is also possible to output to CloudWatch Logs if CloudWatch Agent is installed.

Answer

You can use the cloudwatch agent installed on the EC2 to stream configured log files to cloudwatch logs.
You will need to install CW agent and configure which log files you wish to stream to cloudwatch

logs of commands that is hit to the servers

Relevant content