How to get information about user activities for several days in OS UNIX?

Question

ubuntu

Hello!
There is a server on unix/ ubuntu , I need to view the actions of a specific user: what files he changed, what he created, where he went and, most importantly, when. How to do it?
Sincerely ,
Almik

Answer 1

If you weren't prepared for it in the first place, then no way. If the actions were performed in the console, then something may be in history. Changed and created files can be found with the command find /target_directory -type f -mtime -3, something else may be reflected in the logs, but you won’t recognize most of them. Tell the goal, maybe there is a specific tool, but in the basic version - no way.

Answer 2

you can also see in ~/.bash_history what commands the user entered at all, unless of course he cleans it.