1826592 Members
3754 Online
109695 Solutions
New Discussion

SSHD logging problems.

 
GlennBroSitel
Occasional Advisor

SSHD logging problems.

I am trying to get sshd to log to a seperate file locally and in addition send out to a LogLogic server.

This is my syslog.conf...

cldhp_1 /var/adm/syslog # vi /etc/syslog.conf
"/etc/syslog.conf" [Read only] 15 lines, 441 characters
# @(#)B.11.31_LR
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
LOCAL1.debug /var/adm/syslog/sshd.log
mail.debug /var/adm/syslog/mail.log
*.info;mail.none /var/adm/syslog/syslog.log
*.info;mail.none @loglogic
#local2.info;mail.none /var/adm/sudolog
local2.debug;local2.info;mail.none /var/log/sudo
*.alert /dev/console
*.alert root
*.emerg

In /opt/ssh/etc/sshd_config I have the facility set to LOCAL5 and the mode set to verbose.

What am I missing/doing wrong here?
1 REPLY 1
GlennBroSitel
Occasional Advisor

Re: SSHD logging problems.

Opps... wrong paste

cldhp_1 /etc/X11 # cat /etc/syslog.conf
# @(#)B.11.31_LR
#
# syslogd configuration file.
#
# See syslogd(1M) for information about the format of this file.
#
local5.* /var/adm/syslog/sshd.log
local5.* @loglogic
mail.debug /var/adm/syslog/mail.log
*.info;mail.none;local1.none /var/adm/syslog/syslog.log
*.info;mail.none @loglogic
local2.*;mail.none @loglogic
local2.*;mail.none /var/log/sudo
*.alert /dev/console
*.alert root
*.emerg

This is the config file for syslog