Command History is generally a feature provided by bash, and is stored per-user in the .bash_history
file in your home directory.
While the history
command may show you different histories in different terminals while those terminals are open, they will all be merged and written to the common ~/.bash_history
file once you exit the terminals.
The bash history can do many helpful things, and the search with Strg-r
that Terry Wang mentioned is an important one among them. But it is also possible to do exactly what you asked for.
You can re-do the previous command with !!
. With this, you can also edit the previous command. If for example you forgot to get root privileges for a command
apt-get install a-long-list-of-packages
you don't have to retype all of that again. Instead just call
sudo !!
If you want to re-execute the command at a specific position from your history, you can also use !
, for example
!3
to re-execute the command at position 3. Be aware that this counts from the top. So if you're storing 500 commands in your history, !1
would be "500 commands ago". You can also use negative numbers. For example
!-2
would re-execute the second last command.
You can also re-execute the last command that started with a string like
!apt-
which would re-do the last line that started with "apt-". If you want the last command where the string appeared anywhere in the line, you can use something like
!?pt-ge
There are more interesting things the bash history can do. Just to give an impression of the wide range of possibilities, you can specifically access a parameter of a command from history. So
!-5:3:p
would print the third parameter to the fifth from last command.
EDIT: Regarding Rudie's comment below, with the standard settings this bash history expansions are indeed executed directly. It's probably best described like this: A call like !-3
is replaced by the shell with the third last command from your history and then your input (with the replacement) executed. So if you type !-3
and press ENTER
and your third last command was ls ~
, it's in effect the same as if you typed ls ~
again and pressed ENTER
"on your own".
If you don't want that, you can set the shell option histverify
. For setting and unsetting shell options, you might want to read up on the shopt
command. With histverify
set, a call like !-3
only writes the replacement from your history to your command line, but doesn't execute it directly. You have, so to speek, press the crucial ENTER
yourself - or refrain from it, if you choose to.
Best Answer
It's easier if you use a different time format (which you can, since setting
HISTTIMEFORMAT
to any value is enough for bash to keep track of time). So, use the Unix timestamp, and the difference between now and then:date +%s
is the current Unix timestamp, and the second column of history's output is theHISTTIMEFORMAT
field, so this checks if the difference in seconds is less than 15 minutes.However, if your intention is to monitor command usage, then this really isn't the way to go about it. Setup auditd instead (it can be configured to watch for command execution).