How do I install the X Last skill?

Run npx skillmds@latest add x-cmd/x-last in your terminal (requires Node.js), paste this page's agent-chat prompt into Claude, Cursor, or any MCP-connected agent, or download the SKILL.md file and copy it into your agent's skills directory.

Is X Last safe to use?

This skill has not completed SkillMD's automated safety review yet. SkillMD never runs a skill's scripts for you; review the SKILL.md before installing.

Which AI agents work with X Last?

This skill is tagged as working with Claude Code, Claude.ai, OpenAI Codex. SKILL.md is an open format, so most agents that read a skills directory can load it too.

Is X Last free to use?

Yes. Installing skills from SkillMD is free. This skill is licensed under Apache-2.

Who published X Last?

x-cmd (@x-cmd) published this skill. Their other Agent Skills are listed on their SkillMD profile.

X Last by x-cmd — Agent Skill

Name: X Last
Author: x-cmd

X Last

Enhanced `last` command with CSV, JSON, tree view, and interactive UI for viewing login history. **Dependency**: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.

x-cmd f93909c 6 files · 6.9 KB Updated Sep 17, 2026

File contents

x last - User Login History

Enhanced last command with multiple output formats, tree view, and interactive UI.

Quick Start

# Interactive login history viewer (default in TTY)
x last

# All records
x last --all

Features

Multiple formats: CSV, JSON, tree view
Interactive UI: Built-in picker for TTY mode
Filtering options: Login only, reboot only, all records
Session duration: Calculated login session lengths
Tree view: Grouped by system reboot

Commands

Command	Description
`x last`	Interactive view (default) / CSV (piped)
`x last --all`	All records (TTY: interactive picker)
`x last --login`	Login records only, exclude reboots
`x last --reboot`	System reboot records only
`x last --tree`	Tree view grouped by reboot
`x last --csv`	CSV format output
`x last --json`	JSON format output

Examples

Basic Usage

# Default view
x last

# All records with interactive picker
x last --all

# Login records only
x last --login

Format Output

# JSON format
x last --json

# CSV format
x last --csv

# Tree view
x last --tree

Filtering

# Specific user
x last username

# Specific TTY
x last tty7

# Reboot records only
x last --reboot

Data Processing

# Parse with jq
x last --json | jq '.[] | select(.user == "root")'

# Find recent reboots
x last --reboot --json | jq '.[0:5]'

Output Fields

Field	Description	Example
`user`	Username	`john`, `reboot`
`tty`	Terminal	`pts/0`, `tty7`
`host`	Remote host	`192.168.1.100`
`login`	Login time	`Mon Jan 15 09:30`
`logout`	Logout time	`Mon Jan 15 17:45`
`duration`	Session duration	`08:15`

Platform Notes

Linux

Uses native last command
Reads from /var/log/wtmp

macOS

Uses native last command
Full feature support

Windows

Limited support (no native last command)

Native last(1) manual page

---name: x-lastdescription: Enhanced `last` command with CSV, JSON, tree view, and interactive UI for viewing login history. **Dependency**: This is an x-cmd module. Install x-cmd first (see x-cmd skill for installation options). see x-cmd skill for installation.license: Apache-2.0---# x last - User Login History> Enhanced `last` command with multiple output formats, tree view, and interactive UI.---## Quick Start```bash# Interactive login history viewer (default in TTY)x last# All recordsx last --all```---## Features- **Multiple formats**: CSV, JSON, tree view- **Interactive UI**: Built-in picker for TTY mode- **Filtering options**: Login only, reboot only, all records- **Session duration**: Calculated login session lengths- **Tree view**: Grouped by system reboot---## Commands| Command | Description ||---------|-------------|| `x last` | Interactive view (default) / CSV (piped) || `x last --all` | All records (TTY: interactive picker) || `x last --login` | Login records only, exclude reboots || `x last --reboot` | System reboot records only || `x last --tree` | Tree view grouped by reboot || `x last --csv` | CSV format output || `x last --json` | JSON format output |---## Examples### Basic Usage```bash# Default viewx last# All records with interactive pickerx last --all# Login records onlyx last --login```### Format Output```bash# JSON formatx last --json# CSV formatx last --csv# Tree viewx last --tree```### Filtering```bash# Specific userx last username# Specific TTYx last tty7# Reboot records onlyx last --reboot```### Data Processing```bash# Parse with jqx last --json | jq '.[] | select(.user == "root")'# Find recent rebootsx last --reboot --json | jq '.[0:5]'```---## Output Fields| Field | Description | Example ||-------|-------------|---------|| `user` | Username | `john`, `reboot` || `tty` | Terminal | `pts/0`, `tty7` || `host` | Remote host | `192.168.1.100` || `login` | Login time | `Mon Jan 15 09:30` || `logout` | Logout time | `Mon Jan 15 17:45` || `duration` | Session duration | `08:15` |---## Platform Notes### Linux- Uses native `last` command- Reads from `/var/log/wtmp`### macOS- Uses native `last` command- Full feature support### Windows- Limited support (no native last command)---## Related- Native `last(1)` manual page

Frequently asked questions