How to see the history of what commands were executed on behalf of sudo (root) on linux?

Question

linux

Somewhere I read that what commands we run on behalf of sudo, then the launch of this command is logged in the log file. But I don't remember this file. Please, help.

Answer 1

In ubuntu (probably also in debian) it is written to /var/log/auth.log:

Nov 25 01:12:08 host.domain sudo:   galaxy : TTY=pts/1 ; PWD=/home/user ; USER=root ; COMMAND=/bin/bash

On other systems, they can write to other files (/var/log/secure.log, etc.) or to syslog.
It says here how to log the input and output of commands, which allows you to even see what was done aftersudo su -

Answer 2

~/. bash_history

Answer 3

/root/.bash_history