timestamped sshd logs with logwatch
 

Hi,
I use the following command to see my sshd logs.

#logwatch --service sshd --range today --detail high -print

My problem is that the messages are not timestamped. I want to see when a failed login occured, when a user logged in and so on.

How can I do this? Is there any possibility with logwatch?


Thanks,
ddaas

btw: a lot of ssh login attempts every day. I think there are kiddies who want to play. They try to login with user pamela or patrick or jack etc.

Yours prints out a report? Mine doesn't print out anything. I have tried loging in with some fake username and logwatch still won't detect it.

-twantrd