https://community.checkpoint.com/t5/General-Topics/Expert-logs/m-p/198841#M33237 <P>To confirm you already have bash logging enabled per&nbsp;<SPAN>sk99134 and your users have separate or shared accounts?</SPAN></P> Fri, 24 Nov 2023 13:00:08 GMT Chris_Atkinson 2023-11-24T13:00:08Z https://community.checkpoint.com/t5/General-Topics/Expert-logs/m-p/198839#M33236 <P>Hello Mates,</P><P>&nbsp;</P><P>I want to know if is possible to have&nbsp;traceability when we log into expert mode, to be able to see the activity carried out by a certain user after logging in in this mode.</P><P>When you log in with a user who has an admin-like shell, we completely lose traceability when analyzing /var/log/messages. So when we log into expert mode, will it always log in as "admin"?</P><P>&nbsp;</P><P>On the other hand, does anyone know or have a list of which commands are in expert that are not in Dynamic CLI?</P><P>&nbsp;</P><P>Thanks in advance</P><P>&nbsp;</P> Fri, 24 Nov 2023 12:46:19 GMT https://community.checkpoint.com/t5/General-Topics/Expert-logs/m-p/198839#M33236 BrunoCiongoli 2023-11-24T12:46:19Z https://community.checkpoint.com/t5/General-Topics/Expert-logs/m-p/198841#M33237 <P>To confirm you already have bash logging enabled per&nbsp;<SPAN>sk99134 and your users have separate or shared accounts?</SPAN></P> Fri, 24 Nov 2023 13:00:08 GMT https://community.checkpoint.com/t5/General-Topics/Expert-logs/m-p/198841#M33237 Chris_Atkinson 2023-11-24T13:00:08Z