last
is another command for the system admin tool box, it displays the login history of all or any specific user.
Yo do not need to be root to use it:
last
ggarron pts/1 200.87.61.2 Sat Apr 25 11:02 still logged in ggarron pts/0 200.87.61.2 Sat Apr 25 10:41 still logged in publico pts/0 10.1.1.86 Fri Apr 24 16:25 - 16:47 (00:22) ggarron pts/0 200.87.61.2 Sat Apr 18 19:34 - 19:54 (00:20) ggarron pts/0 10.1.1.43 Wed Apr 15 15:27 - 10:30 (19:03) root pts/0 200.87.61.2 Mon Apr 13 22:41 - 01:11 (02:29) ggarron pts/0 200.87.61.2 Sat Apr 11 15:25 - 15:28 (00:02) ggarron pts/0 200.87.61.2 Fri Apr 10 10:40 - 22:33 (11:53) publico pts/0 10.1.1.86 Thu Apr 9 12:02 - 12:02 (00:00) publico pts/0 10.1.1.86 Thu Apr 9 12:01 - 12:01 (00:00)
You can also make the IP or name of the system from where the users logged it, to appear in the last column
last -a
ggarron pts/1 Sat Apr 25 11:02 still logged in 200.87.61.2 ggarron pts/0 Sat Apr 25 10:41 still logged in 200.87.61.2 publico pts/0 Fri Apr 24 16:25 - 16:47 (00:22) 10.1.1.86 ggarron pts/0 Sat Apr 18 19:34 - 19:54 (00:20) 200.87.61.2 ggarron pts/0 Wed Apr 15 15:27 - 10:30 (19:03) 10.1.1.43 root pts/0 Mon Apr 13 22:41 - 01:11 (02:29) 200.87.61.2 ggarron pts/0 Sat Apr 11 15:25 - 15:28 (00:02) 200.87.61.2 ggarron pts/0 Fri Apr 10 10:40 - 22:33 (11:53) 200.87.61.2 publico pts/0 Thu Apr 9 12:02 - 12:02 (00:00) 10.1.1.86 publico pts/0 Thu Apr 9 12:01 - 12:01 (00:00) 10.1.1.86
Or only displa the history for a given user.
last publico -a
publico pts/0 Fri Apr 24 16:25 - 16:47 (00:22) 10.1.1.86 publico pts/0 Thu Apr 9 12:02 - 12:02 (00:00) 10.1.1.86 publico pts/0 Thu Apr 9 12:01 - 12:01 (00:00) 10.1.1.86