It's cheap, just add a line to .bashrc, every time bash is invoked this script is executed and appends a line to a file. I rarely need to see bash_history except when I suspect agents did a boo boo.