how to transfer ssh login attempts to linux machine
 

Hi,
I have two linux machine (ubuntu), and I want to force login login attempts(LOGS)from ssh authentication on first machine (open-SSHD) move to second one any time it happend, in other words, instead writing to /var/log/auth on local machine it alert me on second one

thx

You can have syslog-ng configured to log to a logging server, and to use a socket as a source at the destination. There is a syslog-ng.conf manpage. You may find examples on the net searching on google.

something like udp("destination ip+port514");to destination on source
and file("/var/log/auth.log");on source to destination
Dosn't work

great idea(do you ever see the man you talking about?)realy helpful!



tryed, did't find!!, therefore Im here.. and ask!

http://www.campin.net/newlogcheck.html
This has an example of securing the log traffic through stunnel

Here is a syslog-ng mailing list archive:
https://lists.balabit.hu/pipermail/syslog-ng/

There is a particular example here:
http://sial.org/howto/logging/syslog-ng/

DID IT !!!
Thanks to jschiwal

DID IT !!!
Thanks to jschiwal