sudo logging file

[E. Vodegel]

Hello,

I have installed the application sudo on HP 11.0. I have edited the sudoers file. Some accounts have sudo rights now. Where does the logging (by default) take place? What is the name of the log file? Or how can I setup the logging, so I can see what the sudo accounts are doing?

Thanks, Bye
Erwin

[Patrick Wallek]

On my machine sudo activity is logged to /var/adm/syslog/syslog.log

I did not originally install sudo, so I am not sure if that is a standard set up or not.

[Jim Moffitt_1]

/var/adm/syslog/syslog.log is correct, but you can also change it so it has it's own log, this is how I do it on 10.20:

#visudo

# Override builtin defaults
Defaults syslog=auth
Defaults logfile=/var/adm/syslog/sudo.log

This will create a sudo log for you if it hasn't been created.