[solved] sshd logs :: where ?

Kooothor · 2010-12-02 18:43:23

Hello,

I can't seem to find the sshd logs
Where are they ?
Do I have to configure something in /etc/syslog-ng.conf ?

Thanks.

Last edited by Kooothor (2010-12-02 22:34:50)

Ashren · 2010-12-02 18:48:55

/var/log/auth.log

hexanol · 2010-12-02 22:24:02

If you want to have separate log files for sshd, you can add the following line in /etc/syslog-ng.conf, and then restart syslog-ng.

destination d_sshd { file("/var/log/sshd.log"); };
filter f_sshd { program("sshd"); };
log { source(src); filter(f_sshd); destination(d_sshd); };

You could then add the file /var/log/sshd.log to the list of file in /etc/logrotate.d/syslog-ng.

Of course, this all presume that you are using syslog-ng as your syslog daemon...

Kooothor · 2010-12-02 22:34:34

Thank you both

Arch Linux