ssh log?

IchBin · 06-06-2005, 12:22 AM

I was wondering how I can change where ssh logs? My system currently logs to the messages file which I don't want it to do. I would like it to log to the /var/log/secure file. I've looked in the sshd.conf and the syslog.conf but I can't seem to find anything. Any help is appreciated.!!

setenv02 · 06-06-2005, 09:20 AM

I think you will be able to edit where you want your log in the ssh.conf file. This file is located in /etc/ssh, and will be able to be edited as long as you have permissions. My system has ssh logs logged already to the secure file so good luck with yours.

IchBin · 06-06-2005, 11:01 AM

I have checked both the ssh_conf and the sshd_conf and I do not find anything in the there to specify where it logs.

rose_bud4201 · 06-06-2005, 12:21 PM

Run sshd thusly:

sshd -e 2>/var/log/secure

And you'll get the effect that you want. -e tells sshd to output messages to stderr instead of its default logfile, and then you can redirect stderr (2) to whatever file that you want (in this case /var/log/secure).

IchBin · 06-06-2005, 09:24 PM

I found what I was looking for. In my syslog.conf file I needed to specify auth.info to the secure file. It was actually setup to port all *.info messages to the messages file. Thanks for the suggestion though rose_bud.

vinod_p · 07-04-2008, 06:15 AM

Quote:

Originally Posted by IchBin

I found what I was looking for. In my syslog.conf file I needed to specify auth.info to the secure file. It was actually setup to port all *.info messages to the messages file. Thanks for the suggestion though rose_bud.

Hi,

Can anyone let me know to disable sshd logging? I have tried
/etc/ssh/sshd_config:LogLevel to INFO. But it doenst work.

In our application we have been logging to the other server every few seconds for various checks. So this leaves the server flooded with messages and runs the server out of disk space.

Thanks in Advance
Vinod Patil
vinod_p@persistent.co.in

jschiwal · 07-04-2008, 07:01 AM

How about loglevel = error or even loglevel = quiet?

vinod_p · 07-06-2008, 11:14 PM

Quote:

Originally Posted by jschiwal

How about loglevel = error or even loglevel = quiet?

Yeah i tried that as well... but it doesnt work.

IchBin · 07-07-2008, 05:44 PM

I wouldn't recommend that anyone turn logging off. But if you need to you can just start SSH with -q quiet option.

unsigned_nerd · 08-25-2010, 03:50 AM

I found a solution and tested it under grml linux (a fun debian based distro):

http://unsigned-nerd.blogspot.com/20...ation-log.html