Does RHEL version of “init” log child processes’ events into `/var/log/wtmp` ?

Solution Verified - Updated -

Issue

  • On other Linux distributions, the process of init will monitor the processes which are spawned by init and save log in the file of /var/log/wtmp when the processes terminated or respawned.
    E.g. The following utmp entry contains the process’s pid(29130), exit code(e_termination = 0, e_exit = 0), and the time (1372765962)
utmp_entry= {ut_type = 5, ut_pid = 29130, ut_line = '\0' <repeats 31 times>, ut_id = "IT64", 
  ut_user = '\0' <repeats 31 times>, 
  ut_host = "2.6.21_mvlcge510-pc_target-x86_em64t-Linux-cge5", '\0' <repeats 208 times>, ut_exit = {
    e_termination = 0, e_exit = 0}, ut_session = 0, ut_tv = {tv_sec = 1372765962, tv_usec = 0}, ut_addr_v6 = {
69537, 0, 0, 0}, __unused = '\0' <repeats 19 times>}
  • Based on the above information, there are some tools to monitor some daemon processes and do some post-processing accordingly.
  • But on Red Hat Enterprise Linux, there is no similar information which had been saved in /var/log/wtmp.
  • Is there any difference between RHEL and the other Linux such as inttab is not supported in RHEL but instead use upstart.
  • Does RHEL version of init log child processes’ events into /var/log/wtmp?
  • If yes, how to configure it?
  • If no, is there an equivalent mechanism in RHEL to meet the existing functionalities?

Environment

  • Red Hat Enterprise Linux 6

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase of over 48,000 articles and solutions.

Current Customers and Partners

Log in for full access

Log In