We have a setup where we have large number of users ( around 1000 ) have various roles assigned to perform specific tasks on
the setup. Since the system is very critical and complex and we have such a huge number of users, As a system administrator , I am looking for
a solution/ tool to monitor / capture every user command/activity logs so that it will be easier to trace each user's activity.
Your help is highly appreciated.
Start with this doc and let us know if you have any questions:
Auditing in Oracle Solaris - System Administration Guide: Security Services