Monitoring Linux Users and Processes in Real Time Using whowatch

Whowatch is a console-based, interactive user and process monitoring tool. Whowatch shows the information about the user’s currently logged on the machine, in real-time. It shows the information like login name, tty, host, user’s processes of logging user’s. whowatch shows all processes of the selected user’s in tree format. We can send the singles like SIGINT, SIGHUP, SIFTERM, and SIGKILL signals to the processes.

Now Let’s see how to install the whowatch on Linux systems:

Installation of whowatch:

To install whowatch on Debian based system like Ubuntu, Kali Linux use the following command:

sudo apt install whowatch

To install whowatch on CentOs/RHEL systems use the following command:

sudo yum install whowatch  

To install whowatch on Fedora 22+ system use the following command

sudo dng install whowatch

To install whowatch on Arch-based system like Arch Linux, Garuda Linux use the following command

sudo pacman install whowatch

Now, We have installed the whowatch on our Linux system now let’s see how to use whowatch

How to Use of whowatch:

To run Whowatch simple run whowatch command

whowatch

Then we can see the output like:

In the above output, we can see that there are 3 users logged in the system with tty1,pts, and tty2.

We can select the particular user using the up and down arrow keys. To view the information like name, home, UID, GID, and shell of selected user use d key.

To view the user’s process tree of selected use press ENTER key

To view all processes of selected user use t key

To view the details of any specific process. Select the process using arrow keys and use d key

To view information about the system user s key

To find more information about the whowatch using the man command

man whowatch