whowatch – Monitor Linux Users and Processes in Real Time

whowatch is a simple, easy-to-use interactive who-like command line program for monitoring processes and users on a Linux system. It shows who is logged on to your system and what they are doing, in a similar fashion as the w command in real-time.

It shows total number of users on the system and number of users per connection type (local, telnet, ssh and others). whowatch also shows system uptime and displays information such as user’s login name, tty, host, processes as well as the type of the connection.

In addition, you can select a particular user and view their processes tree. In the process tree mode, you can send the SIGINT and SIGKILL signals to selected process in a fun way.

In this brief article, we will explain how to install and use whowatch on Linux systems to monitor users and processes in real time in a machine.

How to Install whowatch in Linux

The program whowatch can be easily installed from the default repositories using package manager on your Linux distribution as shown.

$ sudo apt install whowatch  [On Ubuntu/Debian]
$ sudo yum install whowatch  [On CentOs/RHEL]
$ sudo dng install whowatch  [On Fedora 22+]

Once installed, you can simply type the whowatch in the command line, you will see the following screen.

$ whowatch
Monitor Logged in Users
Monitor Logged in Users

You can view a particular user’s details, simply highlight the user (use the Up and Down arrows to navigate). Then press d key to list the user information as shown in this screenshot.

Check User Information in Linux
Check User Information in Linux

To view a users process tree, press Enter after highlighting that particular user.

Monitor User Process
Monitor User Process

To view all Linux user processes tree, press t.

Monitor Linux User Processes
Monitor Linux User Processes

You can also view Linux system information by pressing s key.

Check Linux System Information
Check Linux System Information

For more information, see the whowatch man page as shown.

$ man whowatch

You will also find these related articles useful:

  1. How to Monitor Linux Commands Executed by System Users in Real-time
  2. How to Monitor User Activity with psacct or acct Tools

That’s all! whowatch is a simple, easy-to-use interactive command line utility for monitoring processes and users on a Linux system. In this brief guide, we have explained how to install and use whowatch. Use the feedback form below to ask any questions or share your thoughts about this utility.

Hey TecMint readers,

Exciting news! Every month, our top blog commenters will have the chance to win fantastic rewards, like free Linux eBooks such as RHCE, RHCSA, LFCS, Learn Linux, and Awk, each worth $20!

Learn more about the contest and stand a chance to win by sharing your thoughts below!

Aaron Kili
Aaron Kili is a Linux and F.O.S.S enthusiast, an upcoming Linux SysAdmin, web developer, and currently a content creator for TecMint who loves working with computers and strongly believes in sharing knowledge.

Each tutorial at TecMint is created by a team of experienced Linux system administrators so that it meets our high-quality standards.

Join the TecMint Weekly Newsletter (More Than 156,129 Linux Enthusiasts Have Subscribed)
Was this article helpful? Please add a comment or buy me a coffee to show your appreciation.

Got Something to Say? Join the Discussion...

Thank you for taking the time to share your thoughts with us. We appreciate your decision to leave a comment and value your contribution to the discussion. It's important to note that we moderate all comments in accordance with our comment policy to ensure a respectful and constructive conversation.

Rest assured that your email address will remain private and will not be published or shared with anyone. We prioritize the privacy and security of our users.