Does RHEL version of “init” log child processes’ events into `/var/log/wtmp` ?

Solution Verified - Updated -

Issue

  • On other Linux distributions, the process of init will monitor the processes which are spawned by init and save log in the file of /var/log/wtmp when the processes terminated or respawned.
    E.g. The following utmp entry contains the process’s pid(29130), exit code(e_termination = 0, e_exit = 0), and the time (1372765962)
utmp_entry= {ut_type = 5, ut_pid = 29130, ut_line = '\0' <repeats 31 times>, ut_id = "IT64", 
  ut_user = '\0' <repeats 31 times>, 
  ut_host = "2.6.21_mvlcge510-pc_target-x86_em64t-Linux-cge5", '\0' <repeats 208 times>, ut_exit = {
    e_termination = 0, e_exit = 0}, ut_session = 0, ut_tv = {tv_sec = 1372765962, tv_usec = 0}, ut_addr_v6 = {
69537, 0, 0, 0}, __unused = '\0' <repeats 19 times>}
  • Based on the above information, there are some tools to monitor some daemon processes and do some post-processing accordingly.
  • But on Red Hat Enterprise Linux, there is no similar information which had been saved in /var/log/wtmp.
  • Is there any difference between RHEL and the other Linux such as inttab is not supported in RHEL but instead use upstart.
  • Does RHEL version of init log child processes’ events into /var/log/wtmp?
  • If yes, how to configure it?
  • If no, is there an equivalent mechanism in RHEL to meet the existing functionalities?

Environment

  • Red Hat Enterprise Linux 6

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content