history/log of command-lines executed to launch processes(pid)

Question

Given a certain PID, is it possible to discover what command-line executed this process?

top, atop, ps provide real time informations, I'm looking for something whereby I can look the past, because I've seen a process taking many resources of the machine, I've killed it, but now I want to know more about it

On systems with /proc the "directory" for the PID usually has a cmdline or such "file" inside — vonbrand, Nov 01 '15 at 00:21

score 1 · Accepted Answer · answered Oct 30 '15 at 07:12

1

In the general classic sense, no, it's not possible to discover that information by PID. For one thing, PIDs wrap at 64k. There may be other security packages or loggers that would retain this information.

answered Oct 30 '15 at 07:12

RobertL

6,780

history/log of command-lines executed to launch processes(pid)

1 Answers1