Is There any way to log the event of ssh? If so how is it done?
Printable View
Is There any way to log the event of ssh? If so how is it done?
sshd_config's comments show the default settings. In this case, sshd is set to log to the AUTH facility. There is no need to change this unless you hate syslog, or you want to debug sshd. Make sure you have a syslogger installed and that you have configured it correctly. Then you should be able to open the appropriate log in /var/log
Are you asking about the client or the server portion? I think infosec covered the server part well. If you are indeed looking for client logging, it would help to know the OS and SSH client you are using. Let us know.