Why do I see "(unknown :0" in who and last command?
I'm trying to figure out weird entries in /var/log/wtmp.
Running "last" command gives me output like this:
root pts/0 192.168.154.1 Wed Feb 10 07:36 still logged in
(unknown :0 :0 Wed Feb 10 07:35 still logged in
reboot system boot 4.12.14-120-defa Wed Feb 10 07:35 - 07:40 (00:05)
Checking with "who" and "lastb" commands does not reveal anything suspicious regarding user login. When I switch runlevel from graphical.target to multi-user.target there are no more "unknown" entries, so I pressume that graphical user interface is the culprit. This is happening on SLES 12 sp5.
Any ides how to disable/fix these entries?