timestamped sshd logs with logwatch

ddaas · 01-19-2005, 09:13 AM

Hi,
I use the following command to see my sshd logs.

#logwatch --service sshd --range today --detail high -print

My problem is that the messages are not timestamped. I want to see when a failed login occured, when a user logged in and so on.

How can I do this? Is there any possibility with logwatch?

Thanks,
ddaas

btw: a lot of ssh login attempts every day. I think there are kiddies who want to play. They try to login with user pamela or patrick or jack etc.

twantrd · 04-30-2005, 02:34 PM

Yours prints out a report? Mine doesn't print out anything. I have tried loging in with some fake username and logwatch still won't detect it.

-twantrd