SSHD logging problems.

GlennBroSitel — Wed, 10 Sep 2008 15:13:31 GMT

I am trying to get sshd to log to a seperate file locally and in addition send out to a LogLogic server.

This is my syslog.conf...

cldhp_1 /var/adm/syslog # vi /etc/syslog.conf
"/etc/syslog.conf" [Read only] 15 lines, 441 characters
# @(#)B.11.31_LR
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
LOCAL1.debug /var/adm/syslog/sshd.log
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.info;mail.none @loglogic
#local2.info;mail.none /var/adm/sudolog
local2.debug;local2.info;mail.none /var/log/sudo
*.alert /dev/console
*.alert root
*.emerg

In /opt/ssh/etc/sshd_config I have the facility set to LOCAL5 and the mode set to verbose.

What am I missing/doing wrong here?

Re: SSHD logging problems.

GlennBroSitel — Wed, 10 Sep 2008 15:15:25 GMT

Opps... wrong paste

cldhp_1 /etc/X11 # cat /etc/syslog.conf
# @(#)B.11.31_LR
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
local5.* /var/adm/syslog/sshd.log
local5.* @loglogic
mail.debug /var/adm/syslog/mail.log
*.info;mail.none;local1.none /var/adm/syslog/syslog.log
*.info;mail.none @loglogic
local2.*;mail.none @loglogic
local2.*;mail.none /var/log/sudo
*.alert /dev/console
*.alert root
*.emerg

This is the config file for syslog

topic SSHD logging problems. in Operating System - HP-UX

SSHD logging problems.

Re: SSHD logging problems.