Enable Syslog Logging Of SSH Access

These are the steps to enable logging of sshd on Solaris 8
Will probably work on 9 and 10, though the restart of syslog in 10 is different.

Add one line to syslog configuration file
vi /etc/syslog.conf

auth.info /var/log/sshd.log

Create the log file
touch /var/log/sshd.log

Enable syslog in the sshd_config (uncomment line)
vi /etc/ssh/sshd_config

SyslogFacility AUTH
LogLevel INFO

Restart syslogd

/etc/init.d/syslog stop
/etc/init.d/syslog start

Login and check that there is a new entry in /var/log/sshd.log

Published by


Working in IT for longer that I care to remember and in more countries than is normal. Interests besides computers and programming are skiing, gardening, constructing electronics and having a good time.

Leave a Reply

This site uses Akismet to reduce spam. Learn how your comment data is processed.