Thursday, October 16, 2008

ssh logs

I can't find my SSH logs? I checked in /var/log/, and didn't find them? Anyone know where to look (or how to enable them)? If the logs aren't on by default, I really think they should be.

hyperair

/var/log/auth.log is probably what you're looking for. When someone logs in through SSH it's shown there. If you're just looking for last commands executed then go check ~/.bash_history.


Dr small

cat /var/log/auth.log | grep sshd

shane2peru

cat /var/log/auth.log | grep sshd

No comments:

Post a Comment