Logging of All Commands Executed by a User

Hi Team,

We are testing the steps from Oracle KB "Oracle Linux: How to Enforce the Logging of All Commands Executed by a User in OL7 (KB100466)" to capture all commands executed by a specific user.

[root@erptestdb ~]# id dba_vamsi
uid=15003(dba_vamsi) gid=15003(dba_vamsi) groups=15003(dba_vamsi),54332(dbaadmins)

Audit Rules Configured
-a exit,always -F arch=b64 -F uid=15003 -S execve
-a exit,always -F arch=b32 -F uid=15003 -S execve

Rules are present in:

/etc/audit/rules.d/audit.rules

and loaded successfully:

[root@erptestdb ~]# auditctl -l
-a always,exit -F arch=b64 -S execve -F uid=15003