shell_history¶
A line-delimited (command) table of per-user .*_history data.
Platform support¶
Please be aware that some queries can only be run against certain platforms. Below is a list of the supported platforms that this query supports. Zercurity will automatically pause queries from running if errors are detected. Running a query against an unsupported platform will result in the following error: no such table: shell_history
Linux
Mac OSX
Table schema¶
Name |
Type |
Description |
---|---|---|
uid |
BIGINT |
Shell history owner |
time |
INTEGER |
Entry timestamp |
command |
TEXT |
Unparsed date/line/command history line |
history_file |
TEXT |
Path to the .*_history for this user |
Query examples¶
select * from users join shell_history using (uid)