last

Installation
SKILL.md

last - Enhanced Login History

The last module provides a highly flexible way to view system login history, supporting interactive exploration, tree-based grouping by reboot, and structured data exports (JSON/CSV).

When to Activate

  • When the user wants to audit recent system login and logout activity.
  • When checking system reboot history in a structured format.
  • When performing interactive analysis of user sessions in a TTY.
  • When exporting login records for security reporting or external analysis.

Core Principles & Rules

  • Interactive Browsing: Default behavior in TTY is an interactive selector for records.
  • Tree View: Use --tree to group sessions by the reboot events that preceded them.
  • Structured Formats: Support for -j (JSON) and -c (CSV) for easy parsing.

Patterns & Examples

Interactive Audit

# Browse all login/logout records interactively
x last

Reboot History

# Show only system reboot records
x last --reboot

JSON Export

# Get all login history as a JSON object
x last --json

Grouped View

# Display login records grouped by system reboots in a tree structure
x last --tree

Checklist

  • Confirm if the user needs a specific format (JSON, CSV, Tree).
  • Verify if filtering by user or reboot is required.
Related skills

More from x-cmd/skill

Installs
3
Repository
x-cmd/skill
GitHub Stars
20
First Seen
Apr 10, 2026