How to get only user typing commands

[youjeongsue]

Checklist before starting to submit this support request

I confirm that:

• I am requesting support! :)
• I have tested this with the latest stable Snoopy version (or the latest master build).
• I have checked the FAQ.
• I have read Snoopy's documentation here and here.
• I have searched Snoopy issues for an existing issue that matches my problem, and found none.

Issue description

Hi, Snoopy team! I have simple question.
How can I get only user typing commands for result. I have searched Snoopy docs like filter feature but cannot find the way.
Any comments will very helpful for me!!

Issue reproduction steps

Expected result

<FILLIN>

Actual result

<FILLIN>

[bostjan]

Hey @youjeongsue.

I think what you're looking for is the only_tty filter.

The comments in the config file maybe really aren't the best in this regard (feel free to open a PR with improvements):
https://github.com/a2o/snoopy/blob/master/etc/snoopy.ini.in#L81

In short, configure Snoopy filtering as follows:

filter_chain = only_tty

This should do the trick. Can you report back if it works as expected?

[hatamiarash7]

This filter will only work when commands are run with sudo...it won't work when the user runs their normal commands.

sudo ls ---> logged
ls ---> not work

Is there a way to save normal commands as well?

[bostjan]

@hatamiarash7, are you using the output = file:/path/to/your/logfile.log option?

[DenisMkS]

I have the same issue and yes, I'm using custom path to the log file output = file:/var/log/snoopy.log

FIXED: after reading FAQ I adjusted log file permissions and all OK now.

[bostjan]

For the reference, @DenisMkS found this entry in the FAQ:
https://github.com/a2o/snoopy/blob/master/doc/FAQ.md#i-do-not-see-any-non-root-snoopy-entries-in-my-logs