With IPHost Network Monitor you can run simple snmp requests against a Cisco device in your network.
sysApplElmtPastRunUser
sys Appl Elmt Past Run User
1.3.6.1.2.1.54.1.2.4.1.11
The process owner's login name (e.g. root).
Back to SYSAPPL-MIB MIB page.
IPHost Network monitor allows you to monitor sysApplElmtPastRunUser on Cisco device via the SNMP protocol. Download IPHost Network Monitor (500 monitors for 30 days, 50 monitors free forever) to start monitoring Cisco routers right now.