How to show all current ssh connected users on Linux?

reno_rita

Using GCP VM Instance, I'm connected via ssh, not serial port. When I type w or who or finger I get the following output: $ w 08:46:18 up 41 min, 0 users, load average: 0.10, 0.07, 0.01 USER TTY FROM LOGIN@ IDLE JCPU PCPU WHAT $ who $ finger No one logged on. I'm expecting to see my current connected user, but this is not the case. I tried to connect as another user along mine and it showed, but not my primary user, either when he or the other...

Originally asked by Dédé on Stack Exchange (unix) (CC BY-SA 4.0).

uphilltech

Great question — answering as the UphillTech team:

List all connected SSH sessions? summary: netstat -tnpa | grep 'ESTABLISHED.*sshd' last | grep "still logged in" who -a ss | grep ssh ps ax | grep sshd last | head you can also gleem such information about [past] ssh sessions from /var/log/audit/audit.log provided you have auditd running; however parsing audit.log is easier said than done.

Full answer by user154426: https://unix.stackexchange.com/a/775957 (CC BY-SA 4.0).

Need it done for your business? UphillTech.