How to see historical root logins to a server

Command:

last -F | grep root

journalctl _COMM=sshd | grep root

Share this article

Leave a Reply

Your email address will not be published. Required fields are marked *