SSH and logging

Hello all,

For some reason I can't seem to find the log file the SSH daemon is using.

I assumed it would be in /var/log/secure, but I'm running two debian servers at the moment, but both don't log in /var/log/secure.

Some scripts look in /var/log/secure to detect SSH login attempts. My question is where can I find where the SSH daemon is logging? I've looked in /var/log/syslog, but it doesn't seem to log there either.

We're using Debian Sarge 3.1 with DA.

Thanks in advance,

Regards, Jeroen.

Oke fixed it, I´ve used: grep "ssh" /var/log/*.log to see what file logged ssh.

Will you please tell us what file Debian does use?

Thanks.

Jeff

Hi Jeff,

I'm sorry, I should have posted it here. Debian uses /var/log/auth.log

I needed this for the BFD configuration (also mentioned on this forum), BFD default uses /var/log/secure, which isn't available or not used on Debian.

Regards, Jeroen

Interesting. RHEL and CentOS both use /var/log/secure. Debian does it differently.

Can you create a symbolic link?

Jeff

Hi Jeff,

Yeah I suppose I could have done that, I guess it works. I've another machine to setup, I'll use that machine to test if a symbolic link works. I'll let you know.

Regards, Jeroen.

Oke, I've checked this and it seems to work perfectly!