As a system administrator working in a multi-user environment, you should know who is logged in to your system. Luckily, the Linux OS allows you to achieve this using a simple and built-in command known as "who".
Who command is one of the GNU Core Utilities that uses the /var/log/utmp file to provide information about who is logged in to the system, which time they have logged in and from where they have logged in.
It is similar to the "w" command and displays the same information along with some other information as well such as the last time when the system was booted and in which run level the system is in and a little more.
Here, at LinuxAPT, as part of our Server Management Services, we regularly assist our Customers to perform related Linux Command queries.
In this context, we shall look into how to use the who command in Debian 10 Buster Linux OS system along with some of the command-line options.
When 'who' command is used without any command line options, it displays the following information:
i. Who is Logged in to the system
ii. How they have logged in (User's Terminal)
iii. Date and Time of login
iv. From where they have logged in (Hostname or IP address of the remote server)
First user in the list is logged in directly to the system and the other two are logged in from the remote systems. It also displays the date and time when they logged in, and the IP addresses of the servers from where they are logged in.
Here we will discuss some of the commonly used who command line options.
1. To Display Date and time of last system boot
To display date and time of last system boot, use who command with the -b or –boot option like this:
$ who -b2. To Display column headings in who command
Who command without any command line option displays information in columns without any headings. It is often difficult to remember what each column is about.
However, using the -h or –heading option with who command, you can display headings on the top of each column.
$ who –H3. To Display user's idle time
Idle time is the time that has passed without any user's activity during the user’s session. In order to view the idle time for each user, use who command with the -u or –users option:
$ who -uIf we see the output, (old) in the first user's line shows the user has been inactive since the last 24 hrs, (00:11) in the second user's line shows that the second user has been inactive since the last 11 minutes.
The (.) in the third user's line shows the user is currently active.
4. To Display quick count and name of current users
If you want brief information about logged in users, use who command with the -q or –count option. It will display the name and the number of users logged in to the system.
$ who -q5. To Display Login Processes
To display the current login processes on the system, use who command with the -l or –login option like this:
$ who -l6. To Display message status
You can also display the messages status of the currently logged in users. Use who command with either of -T, -w or –message option:
$ who –TAfter each user's name, you will see the message status as "+" or "–" based on whether the messaging is turned on or off respectively.
To will notice that the messaging is on for the first two users while it is off for the third user.
7. To Display Dead Processes
You can also display the dead processes in Linux. To do so, use who command with -d or –dead option like this:
$ who -d8. To Display current run level
Run level is a mode in Linux that the system uses for performing different functions. There are seven run levels (0-6) on the system which are categorized based on the available services:
$ who -rTo view the current run level of the system, use who command with -r option.
9. To Display All Information
All the command line options we have discussed above provide different informations. To view all the information in a single output, use who command the -a or –all option as follows:
$ who -a10. To Use multiple options with who command
Who command can also be used with multiple command line options. Use who command followed by multiple options using a single hyphen.
For example, to display all the information along with column headings, the command would be:
$ who -aHFollowing commands can provide you some help related to who command.
To view brief information about who command, use whatis command as follows:
$ whatis whoTo view who command man page, use the following command:
$ man whoUse the –help option with who command to display help:
$ who –helpAlso, To save the output of who command in a file for record purpose, type who followed by the redirector (>) symbol and the filename where you want to save the output:
$ who > file_nameThe output of who command will be saved in the file rather than displaying on the terminal.
This article covers the who command in Linux along with its some of the useful command line options.
Sometimes, while working on the command line, you might want to know more about logged in users.
There exists a command line utility who which you can use to access this kind of information.
Basically, the who command shows who all are logged in.
Here's its syntax:
$ who [OPTION]... [ FILE | ARG1 ARG2 ]To access time of last system boot?
For this, use the -b command line option:
$ who -b
