Is it possible to audit the Linux User Shell? I am trying to gather what commands a user is running no our systems.
Can auditd handle this?

TIA