Logging SSH in a separate file other than the regular /var/log/messages
 

Hi,

Generally SSH related log messages are logged in /var/log/messages file. Is there a way to log them in another different file? I mean is there some configuration setting to enable this?

Hello,

From the manpage of sshd_config:
Then look at your syslog.conf / rsyslog.conf / ... to put in the rules to point to the logfile of your choice. Is that what you're looking for?

Kind regards,

Eric

Actually, I am using syslog-ng for logging. And there is no default Audit message for SSH like AuditFTPDaemon.

Typical ssh log msg locations are in /var/log/messages, /var/log/secure, /var/log/audit/audit.log

yeah..

but my question was is there a way to log SSH messages in another location other than the regular ones.

Or maybe i should rephrase my question and ask how to log SSH messages in a different location while using syslog-ng

Hello,

OK, that's a bit clearer. Have a look at this link. It's a bit outdated and for Suse but I guess you can get what you need from there.

Kind regards,

Eric

Thanks a lot Eric. :)
That was the exact solution. :)

Hi,

Glad to be of assistance! Nice to hear you've got a solution. Have fun with Linux.

Kind regards,

Eric