ConfigServer Community Forum

We've looked at this a bit more, and see that it's actually the rows in the log file that are not writing properly: su'ing outside of screen/tmux you get this: Aug 6 13:47:18 epsilon su: pam_unix(su:session): session opened for user root by username(uid=0) su'ing inside screen/tmux you get this: Aug...

We have found that if a user is in a screen or tmux session and they su or sudo su an alert is not fired. If the user exits their screen/tmux session, the alerts will fire just fine. It seems to be poorly documented that "who am i" does not properly return a user when the session is in scr...