Detection of ansible runs.

[neorejdv76]

Hello,

I would like to monitor ansible runs that are (or have been) executed on a (linux) host.
Things i would like to know:

- If there has been a ansible run in the last x hours.
- With what user the run has been done.
- Possible what playbook(s) has been used.

I think it can be done with userparameters, and do some magic (grepping,sed,awk) in the /var/log directory?
Or maybe there is a more clever way of doing this?
I am using zabbix_agent2 as agents.

We do not use any Redhat automation tooling or any other tools like that.
Any allready has a similair solution for this?

[cyber]

Are you auditing your users, writing down all their commands, they have used? If yes, you probably can find it from audit logs...
But that is only for a host where that playbooks is executed... I dont think there is any notice o the target host(s), is it done by human or ansible.. Only if a specific user is used, so you can say, that "ansible user" has visited us...